last executing test programs: 21m51.952075997s ago: executing program 3 (id=299): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x450, &(0x7f00000015c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b46e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998247856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f0b00f694c5bef739aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c425179b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404c669485a2e714ec9bb31ae0f201ca2e5b9ece2b035fbe2ee8d90aa87a986a307fe4fe90b7b2a48217f79001e60692c", @ANYRES64], 0x2, 0x5587, &(0x7f0000009cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r1, 0x0, 0xe3aa6ea) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000080)={0x17c04, r2, 0x2, 0xdf1c, 0x10000007, 0xdeb1}) 21m48.958313112s ago: executing program 3 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xd}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xec0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) 21m47.768552691s ago: executing program 3 (id=316): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x9f, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x8, 0x6381}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 21m46.783955865s ago: executing program 3 (id=320): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x6000, 0x0, r2, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x401870c8, &(0x7f0000000040)) 21m46.300842133s ago: executing program 3 (id=321): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0xd81, &(0x7f00000001c0)=ANY=[], 0x0) 21m45.963178768s ago: executing program 3 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="66410fc7b12098a40c0f21430f30c74424002a000000c744240200000080ff2c240fc79e64dc0000660f38815b01c7442400fb000000c744240200000000ff2c24b8010000000f01c1f3406fee450fc1d7", 0x51}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m45.295118418s ago: executing program 32 (id=323): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="66410fc7b12098a40c0f21430f30c74424002a000000c744240200000080ff2c240fc79e64dc0000660f38815b01c7442400fb000000c744240200000000ff2c24b8010000000f01c1f3406fee450fc1d7", 0x51}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17.251042373s ago: executing program 2 (id=4860): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x2440, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000004f80)={{0x0, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0xe2, 0x3ff}, 0x0, 0x0, 0x100000000, 0x80, 0x3ff, 0x1, 0x400, 0x9, 0xaad5, 0x2}) 17.078404726s ago: executing program 2 (id=4863): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000200), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="308002", 0x3, r3) r4 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r4, 0xd59, 0x1, r4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 16.676935982s ago: executing program 2 (id=4866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.692725587s ago: executing program 4 (id=4867): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r0, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) write$dsp(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 15.613976328s ago: executing program 2 (id=4868): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019300)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 15.312506342s ago: executing program 2 (id=4870): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r4, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 15.239102084s ago: executing program 2 (id=4871): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000006ffc)=0xb, 0x4) 14.552747314s ago: executing program 4 (id=4875): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x7, 0x2, 0xf, 0x2}]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = getpgrp(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x5, 0x1000, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0x1}, {0x2000000000000007}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10002000005) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_CLEAR_SOCK(r2, 0xab3f) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(&(0x7f0000000000)={0xc006, 0x1, 0x1}, 0x18, 0x2) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xa000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xf9}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x5000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0xffffffff, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0x5, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xd, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0xf000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xeeee0000, [0x80000001, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]}) 11.087924095s ago: executing program 4 (id=4882): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 9.594397477s ago: executing program 1 (id=4886): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x6, 0x0]) 9.473974059s ago: executing program 1 (id=4887): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 9.306858422s ago: executing program 1 (id=4888): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r3, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x0) 7.810343674s ago: executing program 4 (id=4890): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x7, 0x2, 0xf, 0x2}]}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = getpgrp(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x56, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x0, 0x5, 0x1000, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0x1}, {0x2000000000000007}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x2b}, 0x2, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10002000005) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) ioctl$NBD_CLEAR_SOCK(r2, 0xab3f) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) landlock_create_ruleset(&(0x7f0000000000)={0xc006, 0x1, 0x1}, 0x18, 0x2) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7fff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_MASK={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x400c811) 6.352946986s ago: executing program 0 (id=4891): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000380)=""/224, 0xf9, 0xd) 5.314758441s ago: executing program 0 (id=4892): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4000052) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x89, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mq_open(0x0, 0x2, 0x0, &(0x7f00000000c0)={0x9, 0x7fff, 0x400, 0x5}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 4.264927027s ago: executing program 4 (id=4893): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000020109040000008008000100e000000108000200000000000c0002800500"], 0x38}, 0x1, 0x0, 0x0, 0x24004021}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) 3.560694897s ago: executing program 0 (id=4894): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908", 0x4f}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.314084771s ago: executing program 1 (id=4895): r0 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='*!#\\!}-&+,:\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) 3.140259733s ago: executing program 1 (id=4896): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x30520cf7f25f0c66, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 3.020290635s ago: executing program 0 (id=4897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 694.54394ms ago: executing program 4 (id=4898): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60010000100001000000000800000000ac1e0001000000000000000000000000fc01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}}, 0x0) 693.82627ms ago: executing program 0 (id=4899): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x1000, 0x40}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)) writev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="943a1fcb24676066260d837c8a6bf0b9beecfdc4658c963ec2657e821760538c4816fa2c38ae206755a9fa86d7a322d0f6acde1d651d13bd821b76d0a9bdf18aa3da42afcf1643e8bb70f1e1b714", 0x4e}, {&(0x7f00000002c0)="cd02e3089dbb7069", 0x8}, {&(0x7f00000003c0)="a54bf60290", 0x5}], 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 409.270844ms ago: executing program 0 (id=4900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2804001, 0x0, 0x1, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x480c4) modify_ldt$read(0x0, &(0x7f0000000500)=""/69, 0x45) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) pipe(0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(0x0, 0x400, 0x43) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000300), 0x22002, 0x0) 0s ago: executing program 1 (id=4901): r0 = syz_io_uring_setup(0x5a55, &(0x7f0000000200)={0x0, 0x3955, 0x8000, 0x1, 0x297}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYRES8, @ANYRES8], 0x4, 0x337, &(0x7f0000000140)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1\x00', 0x292c081, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(0x0, 0xc) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0x8, 0x1, 0x39, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x8, 0x0, 0x0, 0x7, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r6, 0x5761, &(0x7f0000000000)=ANY=[@ANYRES32=r6, @ANYBLOB="fc6405e7f8309d3abf15bc004a0ffbbb18a3ba7327c4d592332d169b94cf2e9971444e6d592fa180444f3d00bb51", @ANYRES64=r5, @ANYRES64=0x0, @ANYRES16=r6]) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x6400, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x110) kernel console output (not intermixed with test programs): cdDevice=48.05 [ 1149.556269][ T6987] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1149.573994][T16775] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1149.596252][T17805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.607075][T16775] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1149.635561][T16775] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1149.650376][T17805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1149.662182][T16775] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1149.679843][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.686229][T16775] usb 2-1: media controller created [ 1149.687055][ T8792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1149.708184][ T5782] Bluetooth: hci0: command tx timeout [ 1149.711001][T16775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1149.756713][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.763909][ T8792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1149.771515][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1149.784334][ T6987] usb 5-1: Using ep0 maxpacket: 16 [ 1149.819799][ T6987] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1149.867477][ T6987] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1149.898332][ T6987] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1149.927035][ T6987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.958439][ T6987] usb 5-1: config 0 descriptor?? [ 1150.022627][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1150.030175][ T23] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1150.045531][ T23] usb 1-1: config 0 has no interface number 0 [ 1150.058009][ T23] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1150.087210][ T23] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1150.100588][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1150.119708][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.128577][ T23] usb 1-1: Product: syz [ 1150.145364][ T23] usb 1-1: Manufacturer: syz [ 1150.150047][ T23] usb 1-1: SerialNumber: syz [ 1150.175074][ T23] usb 1-1: config 0 descriptor?? [ 1150.214323][ T6987] usbhid 5-1:0.0: can't add hid device: -71 [ 1150.221963][ T6987] usbhid: probe of 5-1:0.0 failed with error -71 [ 1150.263364][ T6987] usb 5-1: USB disconnect, device number 4 [ 1150.373041][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.453994][T17805] veth0_vlan: entered promiscuous mode [ 1150.479980][T17805] veth1_vlan: entered promiscuous mode [ 1150.526563][T17805] veth0_macvtap: entered promiscuous mode [ 1150.541028][T17805] veth1_macvtap: entered promiscuous mode [ 1150.571677][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.590411][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.600691][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.611635][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.621674][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.632241][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.644827][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.661359][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.671957][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.681807][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.692873][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.703340][T17805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.713878][T17805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.734191][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.749279][T17805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.758019][T17805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.767637][T17805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.777144][T17805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.860365][ T23] appletouch 1-1:0.85: Geyser mode initialized. [ 1150.881627][ T23] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input24 [ 1150.914134][T17933] usb 2-1: dvb_usb_au6610: wlen=234, aborting [ 1150.921641][T16775] zl10353_read_register: readreg error (reg=127, ret==0) [ 1150.942683][ T8791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.972450][T17976] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1150.982308][ T8791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.104323][ T175] usb 1-1: USB disconnect, device number 6 [ 1151.129719][ T8791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.138660][T16775] usb 2-1: USB disconnect, device number 10 [ 1151.152547][ T8791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.168144][ T175] appletouch 1-1:0.85: input: appletouch disconnected [ 1151.722829][T16775] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1151.941386][ T5782] Bluetooth: hci0: command tx timeout [ 1152.022451][ T970] infiniband syz1: ib_query_port failed (-19) [ 1152.147280][T16775] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1152.171538][T16775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.188446][T16775] usb 3-1: Product: syz [ 1152.217957][T16775] usb 3-1: Manufacturer: syz [ 1152.222845][T16775] usb 3-1: SerialNumber: syz [ 1152.248044][T16775] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1152.331882][ T970] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1152.419848][T18011] overlay: Bad value for 'redirect_dir' [ 1152.491232][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.578757][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fec0) [ 1152.606276][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.618958][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1152.635507][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1152.654710][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1152.663027][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1152.673974][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1152.683483][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1152.749519][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.829162][T16508] usb 3-1: USB disconnect, device number 12 [ 1152.876469][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.194596][ T27] audit: type=1326 audit(1782808326.037:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18005 comm="syz.0.3137" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb2299ce59 code=0x7fc00000 [ 1153.219997][ T11] tipc: Disabling bearer [ 1153.239794][ T11] tipc: Left network mode [ 1153.267694][T18014] chnl_net:caif_netlink_parms(): no params data found [ 1153.503212][ T970] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1153.525188][ T970] ath9k_htc: Failed to initialize the device [ 1153.583575][T16508] usb 3-1: ath9k_htc: USB layer deinitialized [ 1154.133335][T18014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.150163][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.166582][T18014] bridge_slave_0: entered allmulticast mode [ 1154.185128][T18014] bridge_slave_0: entered promiscuous mode [ 1154.261334][T18014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.269462][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.277139][T18014] bridge_slave_1: entered allmulticast mode [ 1154.292616][T18014] bridge_slave_1: entered promiscuous mode [ 1154.378072][T18014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.390688][T18014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.683400][T18014] team0: Port device team_slave_0 added [ 1154.781414][T18014] team0: Port device team_slave_1 added [ 1154.888058][ T5782] Bluetooth: hci2: command tx timeout [ 1154.975200][T18014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1154.982790][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.017517][T18014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.034288][T18014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.041509][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1155.076824][T18014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.243029][ T175] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1155.343037][T18014] hsr_slave_0: entered promiscuous mode [ 1155.360828][T18014] hsr_slave_1: entered promiscuous mode [ 1155.375116][T18014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1155.394372][T18014] Cannot create hsr debugfs directory [ 1155.449759][ T175] usb 3-1: Using ep0 maxpacket: 8 [ 1155.464829][ T175] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1155.483431][ T175] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1155.504043][ T175] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1155.512647][ T175] usb 3-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1155.522637][ T11] hsr_slave_0: left promiscuous mode [ 1155.533282][ T11] hsr_slave_1: left promiscuous mode [ 1155.540152][ T175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.548568][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1155.557524][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1155.559450][ T175] usb 3-1: config 0 descriptor?? [ 1155.570619][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1155.578061][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1155.601345][ T11] bridge_slave_1: left allmulticast mode [ 1155.607032][ T11] bridge_slave_1: left promiscuous mode [ 1155.622300][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.656868][ T11] bridge_slave_0: left allmulticast mode [ 1155.662928][ T11] bridge_slave_0: left promiscuous mode [ 1155.685057][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.767864][ T11] veth1_macvtap: left promiscuous mode [ 1155.773520][ T11] veth0_macvtap: left promiscuous mode [ 1155.786153][ T11] veth1_vlan: left promiscuous mode [ 1155.791517][ T11] veth0_vlan: left promiscuous mode [ 1156.051601][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.083014][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.106336][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.114219][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.125999][ T11] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1156.142125][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.148964][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.174477][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.197322][ T175] asus 0003:0B05:17E0.0008: unknown main item tag 0x0 [ 1156.256162][ T175] asus 0003:0B05:17E0.0008: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.2-1/input0 [ 1156.303486][ T175] usb 3-1: USB disconnect, device number 13 [ 1156.459639][T18108] fido_id[18108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1156.767297][ T11] bond1 (unregistering): Released all slaves [ 1157.140115][ T5782] Bluetooth: hci2: command tx timeout [ 1157.506875][ T5780] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1157.712591][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 1157.722378][ T5780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1157.741112][ T5780] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 1157.753799][ T5780] usb 5-1: config 127 has no interface number 0 [ 1157.760475][ T5780] usb 5-1: config 127 interface 124 has no altsetting 0 [ 1157.777045][ T5780] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1157.795787][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.804201][ T5780] usb 5-1: Product: syz [ 1157.808437][ T5780] usb 5-1: Manufacturer: syz [ 1157.813570][ T5780] usb 5-1: SerialNumber: syz [ 1158.561575][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1158.688796][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1158.831994][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.853987][ T5780] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 1158.950055][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.055869][T18181] netlink: 'syz.2.3190': attribute type 1 has an invalid length. [ 1159.124527][T16508] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1159.140107][ T5780] usb 5-1: device firmware changed [ 1159.158490][ T5780] usb 5-1: USB disconnect, device number 5 [ 1159.353450][T16508] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1159.362821][ T5780] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1159.371989][T16508] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1159.399371][ T5782] Bluetooth: hci2: command tx timeout [ 1159.411456][T16508] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1159.424600][T16508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.432647][T16508] usb 1-1: Product: syz [ 1159.437029][T16508] usb 1-1: Manufacturer: syz [ 1159.441643][T16508] usb 1-1: SerialNumber: syz [ 1159.519180][ T11] bond0 (unregistering): Released all slaves [ 1159.575712][ T5780] usb 5-1: Using ep0 maxpacket: 16 [ 1159.586298][ T5780] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 1159.598459][ T5780] usb 5-1: config 127 has no interface number 0 [ 1159.604752][ T5780] usb 5-1: config 127 interface 124 has no altsetting 0 [ 1159.616190][ T5780] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1159.626234][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.634671][ T5780] usb 5-1: Product: syz [ 1159.638874][ T5780] usb 5-1: Manufacturer: syz [ 1159.643775][ T5780] usb 5-1: SerialNumber: syz [ 1159.694518][T16508] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1159.914422][T16508] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1159.943527][T16508] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1160.359933][T16508] usb 1-1: invalid uac2 rates [ 1160.364838][T16508] usb 1-1: invalid uac2 rates [ 1160.392311][T16508] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1160.420524][T16508] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 1160.445470][ T11] IPVS: stop unused estimator thread 0... [ 1160.585131][T16508] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1160.673691][T16508] usb 1-1: USB disconnect, device number 7 [ 1160.780411][T17227] udevd[17227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1160.832749][ T5780] usb 5-1: USB disconnect, device number 6 [ 1161.070128][T18014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1161.127486][T18014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1161.150287][T18014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1161.185756][T18014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1161.471536][ T5782] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1161.480289][ T5782] Bluetooth: hci1: Injecting HCI hardware error event [ 1161.491574][ T5782] Bluetooth: hci1: hardware error 0x00 [ 1161.535887][T18014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.601046][T18014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.622542][T18071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.629714][T18071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.645697][ T5779] Bluetooth: hci2: command tx timeout [ 1161.688423][T18071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.695603][T18071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.740772][T18014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1161.751630][T18014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1162.209962][T18014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.356453][T18014] veth0_vlan: entered promiscuous mode [ 1162.406222][T18014] veth1_vlan: entered promiscuous mode [ 1162.486765][T18014] veth0_macvtap: entered promiscuous mode [ 1162.527550][T18260] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1162.535251][T18014] veth1_macvtap: entered promiscuous mode [ 1162.590548][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.639905][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.685478][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.729464][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.763164][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1162.791813][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.833626][T18014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.865390][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.902673][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.916246][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.944539][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.966100][T18014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1162.988006][T18014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.013765][T18014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1163.068516][T18014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.096226][T18014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.104973][T18014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.148066][T18014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.218793][T18279] sg_write: data in/out 321342/136 bytes for SCSI command 0x0-- guessing data in; [ 1163.218793][T18279] program syz.0.3216 not setting count and/or reply_len properly [ 1163.354138][T18067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.386017][T18067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.472695][T18071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.520807][T18071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.727538][ T5782] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1163.833816][ T970] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 1164.010538][T18300] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1164.052685][ T970] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1164.082024][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.120450][ T970] usb 1-1: config 0 descriptor?? [ 1164.160597][ T970] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1164.223947][T18308] netlink: 'syz.1.3223': attribute type 29 has an invalid length. [ 1164.266081][T18308] netlink: 'syz.1.3223': attribute type 29 has an invalid length. [ 1164.299749][T18308] netlink: 'syz.1.3223': attribute type 29 has an invalid length. [ 1164.365506][ T970] gp8psk: usb in 128 operation failed. [ 1164.592874][ T970] gp8psk: usb in 146 operation failed. [ 1164.598397][ T970] gp8psk: failed to get FW version [ 1164.619503][ T970] gp8psk: usb in 149 operation failed. [ 1164.642878][ T970] gp8psk: failed to get FPGA version [ 1164.656149][ T970] gp8psk: usb in 138 operation failed. [ 1164.667413][ T970] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1164.699363][ T970] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1164.743706][ T970] usb 1-1: USB disconnect, device number 8 [ 1165.564811][T18343] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1166.425450][T17508] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1166.556991][T18387] netlink: 'syz.1.3245': attribute type 4 has an invalid length. [ 1166.686018][T17508] usb 1-1: Using ep0 maxpacket: 32 [ 1166.694348][T17508] usb 1-1: config 0 has no interfaces? [ 1166.714007][T17508] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1166.733367][T17508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.752502][T17508] usb 1-1: Product: syz [ 1166.766897][T17508] usb 1-1: Manufacturer: syz [ 1166.779210][T17508] usb 1-1: SerialNumber: syz [ 1166.801931][T17508] usb 1-1: config 0 descriptor?? [ 1167.182402][ T970] usb 1-1: USB disconnect, device number 9 [ 1169.167027][T18465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 1169.694016][T18483] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 1169.833889][ T5780] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1170.039339][ T5780] usb 2-1: Using ep0 maxpacket: 32 [ 1170.091947][ T5780] usb 2-1: config 8 has an invalid interface number: 202 but max is 0 [ 1170.111559][ T5780] usb 2-1: config 8 has no interface number 0 [ 1170.118039][ T5780] usb 2-1: config 8 interface 202 has no altsetting 0 [ 1170.135181][ T5780] usb 2-1: New USB device found, idVendor=046d, idProduct=0890, bcdDevice=ee.6e [ 1170.152224][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.163087][ T5780] usb 2-1: Product: syz [ 1170.180176][ T5780] usb 2-1: Manufacturer: syz [ 1170.184810][ T5780] usb 2-1: SerialNumber: syz [ 1170.246391][T17509] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1170.434444][ T5780] usb 2-1: bad CDC descriptors [ 1170.447524][ T5780] gspca_main: spca500-2.14.0 probing 046d:0890 [ 1170.469495][ T5780] usb 2-1: USB disconnect, device number 11 [ 1170.483695][T17509] usb 5-1: Using ep0 maxpacket: 8 [ 1170.496895][T17509] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1170.518819][T17509] usb 5-1: config 179 has no interface number 0 [ 1170.542785][T17509] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1170.557054][T17509] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x8F has invalid maxpacket 1025, setting to 1024 [ 1170.573290][T17509] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1170.586248][T17509] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1170.601609][T17509] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1170.624613][T17509] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1170.633894][T17509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.652546][T18493] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1170.897439][ T5780] usb 5-1: USB disconnect, device number 7 [ 1171.906981][T18571] can: request_module (can-proto-0) failed. [ 1172.152296][ T5780] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1172.257220][T18590] sg_write: data in/out 458592/136 bytes for SCSI command 0x0-- guessing data in; [ 1172.257220][T18590] program syz.0.3333 not setting count and/or reply_len properly [ 1172.341718][T18594] program syz.1.3335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1172.381014][ T5780] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1172.410048][ T5780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.441132][ T5780] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1172.483635][ T5780] usb 5-1: string descriptor 0 read error: -22 [ 1172.504542][ T5780] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1172.514082][ T5780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.570775][ T5780] usb 5-1: selecting invalid altsetting 1 [ 1172.582198][ T5780] usb 5-1: unit 3 not found! [ 1172.797795][ T5780] usb 5-1: unit 0 not found! [ 1172.798351][T18614] program syz.1.3345 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.032139][ T175] usb 5-1: USB disconnect, device number 8 [ 1173.197501][T18628] binder_alloc: 18627: binder_alloc_buf, no vma [ 1173.375713][ T970] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1173.404309][T18636] program syz.1.3354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.581500][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 1173.595248][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.624842][ T970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1173.647615][ T970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1173.665781][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.678852][ T970] usb 1-1: Product: syz [ 1173.684918][ T970] usb 1-1: Manufacturer: syz [ 1173.696281][ T970] usb 1-1: SerialNumber: syz [ 1173.897064][T18656] program syz.1.3363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1173.938144][ T970] usb 1-1: 0:2 : does not exist [ 1173.951789][ T970] usb 1-1: unit 9 not found! [ 1174.015643][ T970] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 1174.018473][T18658] binder: BINDER_SET_CONTEXT_MGR already set [ 1174.047531][T18658] binder: 18657:18658 ioctl 4018620d 2000000002c0 returned -16 [ 1174.051312][ T970] usb 1-1: USB disconnect, device number 10 [ 1174.097298][T17227] udevd[17227]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1174.665737][ T175] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1174.721840][T18680] program syz.0.3374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1174.870358][ T175] usb 5-1: Using ep0 maxpacket: 16 [ 1174.886210][ T175] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1174.892688][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1174.896126][ T175] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.928898][ T175] usb 5-1: Product: syz [ 1174.937850][ T175] usb 5-1: Manufacturer: syz [ 1174.957176][ T175] usb 5-1: SerialNumber: syz [ 1175.104226][T18693] (null): rxe_set_mtu: Set mtu to 1024 [ 1175.219446][ T175] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1175.252863][ T175] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1175.282299][ T175] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1175.301771][ T175] usb 5-1: media controller created [ 1175.341914][ T175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1175.393896][ T175] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1175.480530][ T175] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 1175.484419][T18693] infiniband syz0: set active [ 1175.502504][ T175] usb 5-1: USB disconnect, device number 9 [ 1175.511145][T18693] infiniband syz0: added bond_slave_1 [ 1175.626675][T18693] RDS/IB: syz0: added [ 1175.634032][T18693] smc: adding ib device syz0 with port count 1 [ 1175.642672][T18693] smc: ib device syz0 port 1 has pnetid [ 1176.310989][ T970] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1176.516917][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 1176.526658][ T970] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.553842][ T970] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.573543][ T970] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.589528][ T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.614261][ T970] usb 5-1: Product: syz [ 1176.618519][ T970] usb 5-1: Manufacturer: syz [ 1176.623132][ T970] usb 5-1: SerialNumber: syz [ 1176.886092][ T970] usb 5-1: 0:2 : does not exist [ 1176.891216][ T970] usb 5-1: unit 9 not found! [ 1176.933521][ T970] usb 5-1: USB disconnect, device number 10 [ 1176.968548][T17227] udevd[17227]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1178.288148][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.294670][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.236473][T18781] fuse: Bad value for 'fd' [ 1183.093269][T18855] 9pnet_fd: Insufficient options for proto=fd [ 1183.155032][ T27] audit: type=1326 audit(1782808353.696:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18852 comm="syz.2.3450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3bfd9ce59 code=0x0 [ 1183.328117][T18728] Set syz1 is full, maxelem 65536 reached [ 1183.379129][T17509] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1183.424930][T18864] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1183.590396][T17509] usb 1-1: Using ep0 maxpacket: 8 [ 1183.603044][T17509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.618943][T17509] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1183.635246][T17509] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1183.647208][T17509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.656539][T17509] usb 1-1: Product: syz [ 1183.660742][T17509] usb 1-1: Manufacturer: syz [ 1183.665356][T17509] usb 1-1: SerialNumber: syz [ 1183.949118][T17509] usb 1-1: bad CDC descriptors [ 1183.964205][T17509] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 1184.030412][T17509] usbtest: probe of 1-1:1.0 failed with error -22 [ 1184.460525][ T175] usb 1-1: USB disconnect, device number 11 [ 1184.587086][T18877] 9pnet_fd: Insufficient options for proto=fd [ 1185.406329][T18896] loop0: detected capacity change from 0 to 512 [ 1185.441322][T18896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1186.221115][T18896] vivid-000: ================= START STATUS ================= [ 1186.244205][T18896] vivid-000: Test Pattern: 75% Colorbar [ 1186.297974][T18896] vivid-000: Fill Percentage of Frame: 100 [ 1186.327250][T18901] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.3469: Unimplemented hash flags: 0x0001 [ 1186.411758][T18896] vivid-000: Horizontal Movement: No Movement [ 1186.435004][T18896] vivid-000: Vertical Movement: No Movement [ 1186.451638][T18896] vivid-000: OSD Text Mode: All [ 1186.457921][T18904] 9pnet_fd: Insufficient options for proto=fd [ 1186.470633][T18901] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3469: Corrupt directory, running e2fsck is recommended [ 1186.480603][T18896] vivid-000: Show Border: false [ 1186.585451][T18896] vivid-000: Show Square: false [ 1186.650084][T18896] vivid-000: Sensor Flipped Horizontally: false [ 1186.683447][T18896] vivid-000: Sensor Flipped Vertically: false [ 1187.096195][T18896] vivid-000: Insert SAV Code in Image: false [ 1187.103308][T18896] vivid-000: Insert EAV Code in Image: false [ 1187.110453][T18896] vivid-000: Insert Video Guard Band: false [ 1187.117522][T18896] vivid-000: Reduced Framerate: false [ 1187.128175][T18896] vivid-000: Enable Capture Cropping: true [ 1187.153865][T18896] vivid-000: Enable Capture Composing: true [ 1187.211287][T18896] vivid-000: Enable Capture Scaler: true [ 1187.255592][T18896] vivid-000: Timestamp Source: End of Frame [ 1187.304158][T18896] vivid-000: Colorspace: Rec. 709 [ 1187.350035][T18896] vivid-000: Transfer Function: Default [ 1187.394690][T18896] vivid-000: Y'CbCr Encoding: Default [ 1187.437291][T18896] vivid-000: HSV Encoding: Hue 0-179 [ 1187.481261][T18896] vivid-000: Quantization: Default [ 1187.516149][T18896] vivid-000: Apply Alpha To Red Only: false [ 1187.568219][T18896] vivid-000: Standard Aspect Ratio: 4x3 [ 1187.634939][T18896] vivid-000: DV Timings Signal Mode: Current DV Timings [ 1187.720214][T18896] vivid-000: DV Timings: 640x480p59 inactive [ 1187.797888][T18896] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1187.835835][T18896] vivid-000: Maximum EDID Blocks: 2 [ 1187.846789][T18896] vivid-000: Limited RGB Range (16-235): true [ 1187.865943][T18896] vivid-000: Rx RGB Quantization Range: Automatic [ 1187.876693][T18896] vivid-000: Power Present: 0x00000001 [ 1187.911953][T18896] tpg source WxH: 1280x720 (Y'CbCr) [ 1187.917192][T18896] tpg field: 1 [ 1187.920589][T18896] tpg crop: 64x720@0x0 [ 1187.925197][T18896] tpg compose: 16x720@0x0 [ 1187.929744][T18896] tpg colorspace: 3 [ 1187.930549][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3476'. [ 1187.933852][T18896] tpg transfer function: 0/2 [ 1187.947336][T18896] tpg Y'CbCr encoding: 0/1 [ 1187.951768][T18896] tpg quantization: 0/2 [ 1187.955963][T18896] tpg RGB range: 0/1 [ 1187.960291][T18896] vivid-000: ================== END STATUS ================== [ 1188.371475][T17539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.185822][T18925] 9pnet_fd: Insufficient options for proto=fd [ 1190.202329][T18926] program syz.0.3478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1191.667923][T18948] loop4: detected capacity change from 0 to 64 [ 1192.695869][T18950] 9pnet_fd: Insufficient options for proto=fd [ 1192.748964][T18952] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3491'. [ 1192.927451][T18959] program syz.1.3492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.251308][T18968] loop1: detected capacity change from 0 to 4096 [ 1193.269940][T18968] ntfs3: loop1: Primary boot: start of MFT 0x4 (0xff) is out of volume 0x3. [ 1193.289353][T18968] ntfs3: loop1: try to read out of volume at offset 0x1ffe00 [ 1193.298271][T18975] 9pnet_fd: Insufficient options for proto=fd [ 1193.643490][T18988] program syz.4.3506 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1193.854380][T18994] 9pnet_fd: Insufficient options for proto=fd [ 1194.009307][T19001] loop4: detected capacity change from 0 to 1024 [ 1194.024914][T19001] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1194.033603][T19001] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1194.052978][T19001] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1194.060589][T19001] EXT4-fs (loop4): 1 truncate cleaned up [ 1194.067893][T19001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1194.379126][T16508] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1194.463569][T19022] 9pnet_fd: Insufficient options for proto=fd [ 1194.584349][T16508] usb 5-1: Using ep0 maxpacket: 8 [ 1194.591662][T16508] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1194.606120][T16508] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1194.627636][T16508] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1194.638654][T16508] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1194.648590][T16508] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.691553][T16508] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1194.701099][T16508] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.939474][T16508] usb 5-1: GET_CAPABILITIES returned 0 [ 1194.982681][T16508] usbtmc 5-1:16.0: can't read capabilities [ 1195.070640][T19046] 9pnet_fd: Insufficient options for proto=fd [ 1195.164379][T16508] usb 5-1: USB disconnect, device number 11 [ 1195.526437][T19056] Invalid option length (64959) for dns_resolver key [ 1195.876247][T17218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.964780][T19067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1196.669619][T19074] 9pnet_fd: Insufficient options for proto=fd [ 1197.200572][T19098] 9pnet_fd: Insufficient options for proto=fd [ 1197.460333][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3564'. [ 1197.549622][T19114] loop1: detected capacity change from 0 to 256 [ 1197.594465][T19118] program syz.4.3566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1197.839523][T19127] 9pnet_fd: Insufficient options for proto=fd [ 1198.246457][T19145] program syz.4.3578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1198.363238][T19150] 9pnet_fd: Insufficient options for proto=fd [ 1200.267295][T19177] 9pnet_fd: Insufficient options for proto=fd [ 1200.486235][T19185] loop0: detected capacity change from 0 to 1024 [ 1200.520452][T19185] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1201.807592][T19197] program syz.4.3589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.426999][T19225] program syz.0.3609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1208.231596][T19286] loop0: detected capacity change from 0 to 40427 [ 1208.346197][T19286] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1208.354178][T19286] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1208.365114][T19286] F2FS-fs (loop0): invalid crc value [ 1208.377830][T19286] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1208.452138][T19286] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1208.459274][T19286] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1209.445065][ T27] audit: type=1800 audit(1782808377.450:98): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3630" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1209.962007][ T41] kworker/u4:2: attempt to access beyond end of device [ 1209.962007][ T41] loop0: rw=1, sector=77824, nr_sectors = 2072 limit=40427 [ 1210.048224][ T41] kworker/u4:2: attempt to access beyond end of device [ 1210.048224][ T41] loop0: rw=1, sector=79896, nr_sectors = 2024 limit=40427 [ 1210.131876][ T41] kworker/u4:2: attempt to access beyond end of device [ 1210.131876][ T41] loop0: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 1210.169483][ T41] kworker/u4:2: attempt to access beyond end of device [ 1210.169483][ T41] loop0: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 1210.256156][ T41] kworker/u4:2: attempt to access beyond end of device [ 1210.256156][ T41] loop0: rw=1, sector=57344, nr_sectors = 4088 limit=40427 [ 1210.410934][ T41] kworker/u4:2: attempt to access beyond end of device [ 1210.410934][ T41] loop0: rw=1, sector=61432, nr_sectors = 712 limit=40427 [ 1211.485440][T19336] loop4: detected capacity change from 0 to 1764 [ 1215.746062][T19372] loop0: detected capacity change from 0 to 40427 [ 1215.854035][T19372] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1215.862082][T19372] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1215.953811][T19372] F2FS-fs (loop0): invalid crc value [ 1215.971255][T19372] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1216.053610][T19372] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1216.061084][T19372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1216.435091][ T27] audit: type=1800 audit(1782808384.402:99): pid=19383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3660" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1218.987467][T19407] loop1: detected capacity change from 0 to 40427 [ 1218.995620][T19407] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1219.003450][T19407] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1219.015276][T19407] F2FS-fs (loop1): invalid crc value [ 1219.054393][T19407] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1219.128701][T19407] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1219.138292][T19407] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1219.572869][ T27] audit: type=1800 audit(1782808387.236:100): pid=19431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3672" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1220.896639][T19451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3688'. [ 1222.626204][T19468] loop1: detected capacity change from 0 to 32768 [ 1222.700902][T19468] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1222.809461][T19488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1222.857117][T19468] XFS (loop1): Ending clean mount [ 1223.135690][T18014] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1223.549509][T19505] libceph: resolve '400' (ret=-3): failed [ 1223.604353][T19505] 9pnet_fd: Insufficient options for proto=fd [ 1224.219869][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1224.298352][T19514] loop4: detected capacity change from 0 to 4096 [ 1224.313453][T19514] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1224.908157][T19525] loop0: detected capacity change from 0 to 1764 [ 1225.220654][T19536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3718'. [ 1225.401265][T19542] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 1225.409040][T19542] netlink: 'syz.0.3721': attribute type 4 has an invalid length. [ 1225.433089][T19542] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3721'. [ 1226.968183][T19557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3727'. [ 1226.972948][T19555] loop1: detected capacity change from 0 to 1764 [ 1227.116139][T19559] autofs4:pid:19559:autofs_fill_super: called with bogus options [ 1227.165034][T19559] loop0: detected capacity change from 0 to 8 [ 1227.251992][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1227.416641][T19570] netlink: 'syz.1.3733': attribute type 1 has an invalid length. [ 1227.424559][T19570] netlink: 16118 bytes leftover after parsing attributes in process `syz.1.3733'. [ 1227.692777][T19568] loop4: detected capacity change from 0 to 40427 [ 1227.701025][T19568] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1227.708886][T19568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1227.727726][T19568] F2FS-fs (loop4): invalid crc value [ 1227.746696][T19568] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1227.820071][T19568] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1227.827184][T19568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1227.946623][ T175] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 1228.229232][ T27] audit: type=1800 audit(1782808395.259:101): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3731" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1228.519496][T19587] loop1: detected capacity change from 0 to 1764 [ 1228.674544][ T175] usb 1-1: device descriptor read/64, error -71 [ 1228.964798][ T175] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 1229.001436][T19594] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 1229.016017][T19594] netlink: 16118 bytes leftover after parsing attributes in process `syz.1.3742'. [ 1229.170820][ T175] usb 1-1: device descriptor read/64, error -71 [ 1229.183395][T19596] loop1: detected capacity change from 0 to 16 [ 1229.191419][T19596] erofs: (device loop1): mounted with root inode @ nid 36. [ 1229.204655][T19596] syz.1.3743: attempt to access beyond end of device [ 1229.204655][T19596] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1229.225500][T19596] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1229.241058][ T27] audit: type=1800 audit(1782808396.246:102): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3743" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1229.254814][T19596] syz.1.3743: attempt to access beyond end of device [ 1229.254814][T19596] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1229.274197][T19596] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1229.287359][T19596] syz.1.3743: attempt to access beyond end of device [ 1229.287359][T19596] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1229.301225][T19596] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1229.313282][ T175] usb usb1-port1: attempt power cycle [ 1229.547799][T19605] loop1: detected capacity change from 0 to 1764 [ 1229.798964][ T175] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 1229.838984][T19618] netlink: 'syz.1.3752': attribute type 1 has an invalid length. [ 1229.852200][T19618] netlink: 16118 bytes leftover after parsing attributes in process `syz.1.3752'. [ 1229.862784][ T175] usb 1-1: device descriptor read/8, error -71 [ 1230.156416][ T175] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1230.192814][ T175] usb 1-1: device descriptor read/8, error -71 [ 1230.231661][T19627] loop1: detected capacity change from 0 to 2048 [ 1230.250504][T19627] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1230.263340][T19627] NILFS (loop1): unrecognized mount option "ÿÿÿ00000000000000000000ÑyM¨ÀÌÚBvâŠ%Ä\Ž¸µ•£ýþ}*Œ9r¦“" [ 1230.319053][ T175] usb usb1-port1: unable to enumerate USB device [ 1230.346698][T17227] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1230.578979][T19629] loop0: detected capacity change from 0 to 1764 [ 1230.835719][T19639] netlink: 'syz.2.3762': attribute type 1 has an invalid length. [ 1230.846646][T19639] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.3762'. [ 1231.225298][T19649] loop1: detected capacity change from 0 to 2048 [ 1231.254009][T19649] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1231.306343][T19649] NILFS (loop1): unrecognized mount option "ÿÿÿ00000000000000000000ÑyM¨ÀÌÚBvâŠ%Ä\Ž¸µ•£ýþ}*Œ9r¦“" [ 1231.823552][T19647] loop0: detected capacity change from 0 to 32768 [ 1231.920958][T19647] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1232.245581][T19647] XFS (loop0): Ending clean mount [ 1232.370966][T17539] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1233.434180][T19688] libceph: resolve '400' (ret=-3): failed [ 1234.203732][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1234.417217][T19709] loop1: detected capacity change from 0 to 1764 [ 1234.704550][T19713] binder_alloc: 19712: binder_alloc_buf, no vma [ 1235.851527][T19723] libceph: resolve '400' (ret=-3): failed [ 1236.341442][T19725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3795'. [ 1236.960307][T19730] loop1: detected capacity change from 0 to 40427 [ 1236.967773][T19730] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1236.975637][T19730] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1237.023785][T19730] F2FS-fs (loop1): invalid crc value [ 1237.090489][T19730] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1237.154368][T19730] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1237.161461][T19730] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1238.351269][ T27] audit: type=1800 audit(1782808404.029:103): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3797" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1239.173106][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3806'. [ 1239.283971][T19764] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1240.109735][T19617] Set syz1 is full, maxelem 65536 reached [ 1241.934208][T19792] loop0: detected capacity change from 0 to 128 [ 1241.991800][T19792] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1241.998270][T19796] loop1: detected capacity change from 0 to 512 [ 1242.040688][T19792] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1242.063105][T19796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1242.117563][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.079713][T19792] syz.0.3818 (pid 19792) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1243.487237][T17539] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1243.620881][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 1244.173470][T19835] loop1: detected capacity change from 0 to 40427 [ 1244.252542][T19835] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1244.260369][T19835] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1244.292594][T19835] F2FS-fs (loop1): invalid crc value [ 1244.323477][T19835] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1244.840297][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.846696][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.910917][T19835] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1244.918945][T19835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1245.528932][ T27] audit: type=1800 audit(1782808411.285:104): pid=19849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3835" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1246.279260][T19855] loop4: detected capacity change from 0 to 40427 [ 1246.288237][T19855] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1246.294627][T19859] loop0: detected capacity change from 0 to 2048 [ 1246.296017][T19855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1246.314406][T19855] F2FS-fs (loop4): invalid crc value [ 1246.354085][T19855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1246.416442][T19855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1246.423511][T19855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1246.579503][T19859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.719132][ T27] audit: type=1800 audit(1782808412.375:105): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3841" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1247.130196][T19867] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1247.147965][ T27] audit: type=1800 audit(1782808412.421:106): pid=19871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3840" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1247.256197][T17539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.273689][ T27] audit: type=1800 audit(1782808412.467:107): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3841" name="memory.events" dev="loop0" ino=18 res=0 errno=0 [ 1247.325479][ T27] audit: type=1804 audit(1782808412.513:108): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3841" name="/newroot/218/file1/memory.events" dev="loop0" ino=18 res=1 errno=0 [ 1247.514972][T19877] loop0: detected capacity change from 0 to 16 [ 1247.537417][T19877] erofs: (device loop0): mounted with root inode @ nid 36. [ 1247.552710][T19877] syz.0.3846: attempt to access beyond end of device [ 1247.552710][T19877] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1247.586640][T19877] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1247.609654][ T27] audit: type=1800 audit(1782808413.196:109): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3846" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1248.184792][T19883] loop0: detected capacity change from 0 to 40427 [ 1248.193281][T19883] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1248.201036][T19883] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1248.210505][T19883] F2FS-fs (loop0): invalid crc value [ 1248.223278][T19883] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1248.614216][T19883] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1248.621580][T19883] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1249.051841][ T27] audit: type=1800 audit(1782808414.526:110): pid=19898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3850" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1252.467559][T19932] loop0: detected capacity change from 0 to 40427 [ 1252.485576][T19932] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1252.493443][T19932] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1252.506515][T19932] F2FS-fs (loop0): invalid crc value [ 1252.521829][T19932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1252.566655][T19932] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1252.574426][T19932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1254.541755][T19961] loop1: detected capacity change from 0 to 40427 [ 1254.563306][T19961] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1254.571656][T19961] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1254.583795][T19961] F2FS-fs (loop1): invalid crc value [ 1254.611955][T19961] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1254.690350][T19961] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1254.697628][T19961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1256.655880][ T27] audit: type=1800 audit(1782808420.093:111): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3874" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1258.693097][T18014] syz-executor: attempt to access beyond end of device [ 1258.693097][T18014] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1258.761764][T18014] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1260.299459][T20001] loop0: detected capacity change from 0 to 40427 [ 1260.331377][T20001] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1260.340003][T20001] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1260.378044][T20001] F2FS-fs (loop0): invalid crc value [ 1260.395973][T20001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1260.453805][T20003] loop4: detected capacity change from 0 to 40427 [ 1260.464678][T20003] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1260.472437][T20003] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1260.479622][T20001] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1260.481641][T20003] F2FS-fs (loop4): invalid crc value [ 1260.487729][T20001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1260.641383][T20003] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1260.728731][T20003] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1260.735904][T20003] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1262.963416][ T27] audit: type=1800 audit(1782808427.100:112): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3888" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1264.254086][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.254086][ T11] loop4: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 1264.442918][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.442918][ T11] loop4: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 1264.475030][T20024] tipc: Can't bind to reserved service type 2 [ 1264.545729][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.545729][ T11] loop4: rw=1, sector=49152, nr_sectors = 3592 limit=40427 [ 1264.626579][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.626579][ T11] loop4: rw=1, sector=52744, nr_sectors = 504 limit=40427 [ 1264.722527][T20028] program syz.0.3891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1264.787962][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.787962][ T11] loop4: rw=1, sector=57344, nr_sectors = 6816 limit=40427 [ 1264.917807][ T11] kworker/u4:0: attempt to access beyond end of device [ 1264.917807][ T11] loop4: rw=1, sector=64160, nr_sectors = 4232 limit=40427 [ 1265.000044][ T11] kworker/u4:0: attempt to access beyond end of device [ 1265.000044][ T11] loop4: rw=1, sector=68392, nr_sectors = 1792 limit=40427 [ 1265.203884][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 1265.568495][T20047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3901'. [ 1267.047092][T20067] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3909'. [ 1267.508123][T20080] program syz.1.3915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1267.676494][T20088] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1267.956495][T20100] loop0: detected capacity change from 0 to 1024 [ 1268.404080][ T175] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1268.515913][T20116] libceph: resolve '400' (ret=-3): failed [ 1269.315172][ T175] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1269.347698][ T175] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1269.355326][ T175] usb 1-1: can't read configurations, error -71 [ 1271.722146][T20143] libceph: resolve '400' (ret=-3): failed [ 1272.689349][T20153] loop1: detected capacity change from 0 to 256 [ 1274.512514][T20175] libceph: resolve '400' (ret=-3): failed [ 1275.027206][T20178] loop4: detected capacity change from 0 to 8192 [ 1275.029354][T20188] loop0: detected capacity change from 0 to 1764 [ 1275.059507][T20189] fuse: Bad value for 'fd' [ 1276.123399][T20200] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3961'. [ 1276.321376][T20204] loop1: detected capacity change from 0 to 2048 [ 1276.384272][T20204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1276.624707][T20214] libceph: resolve '400' (ret=-3): failed [ 1276.759735][ T27] audit: type=1800 audit(1782808439.941:113): pid=20204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3963" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1277.009570][ T27] audit: type=1800 audit(1782808440.329:114): pid=20204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3963" name="memory.events" dev="loop1" ino=18 res=0 errno=0 [ 1277.352261][ T27] audit: type=1804 audit(1782808440.394:115): pid=20218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3963" name="/newroot/169/file1/memory.events" dev="loop1" ino=18 res=1 errno=0 [ 1277.422214][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.669717][T20228] loop4: detected capacity change from 0 to 16 [ 1277.680162][T20228] erofs: (device loop4): mounted with root inode @ nid 36. [ 1277.690378][T20228] syz.4.3969: attempt to access beyond end of device [ 1277.690378][T20228] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1277.706422][T20228] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1277.719188][ T27] audit: type=1800 audit(1782808440.994:116): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3969" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1277.755943][T20228] syz.4.3969: attempt to access beyond end of device [ 1277.755943][T20228] loop4: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1277.769252][T20228] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1277.780403][T20228] syz.4.3969: attempt to access beyond end of device [ 1277.780403][T20228] loop4: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1277.793468][T20228] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1278.020994][T20232] loop0: detected capacity change from 0 to 8192 [ 1278.101780][T20240] loop4: detected capacity change from 0 to 2048 [ 1278.259918][T20240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.332035][ T27] audit: type=1800 audit(1782808441.566:117): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3975" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1279.062404][ T27] audit: type=1800 audit(1782808441.566:118): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3975" name="memory.events" dev="loop4" ino=18 res=0 errno=0 [ 1279.200857][ T27] audit: type=1804 audit(1782808441.566:119): pid=20240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3975" name="/newroot/215/file1/memory.events" dev="loop4" ino=18 res=1 errno=0 [ 1279.235683][T20209] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1279.265262][T17218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.205656][T20257] overlayfs: failed to clone upperpath [ 1280.369834][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 1280.849378][T20267] loop4: detected capacity change from 0 to 40427 [ 1280.897110][T20267] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1280.904959][T20267] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1280.915344][T20267] F2FS-fs (loop4): invalid crc value [ 1280.932358][T20267] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1280.985721][T20267] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1280.992959][T20267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1282.734385][ T27] audit: type=1800 audit(1782808444.327:120): pid=20282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3983" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1282.850372][T17218] syz-executor: attempt to access beyond end of device [ 1282.850372][T17218] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1282.880366][T17218] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1284.258499][T20302] loop1: detected capacity change from 0 to 2048 [ 1284.418281][T20302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1284.472678][ T27] audit: type=1800 audit(1782808447.225:121): pid=20302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3995" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1284.543387][ T27] audit: type=1800 audit(1782808447.225:122): pid=20302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3995" name="memory.events" dev="loop1" ino=18 res=0 errno=0 [ 1284.634707][T20315] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3999'. [ 1284.655445][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1284.677551][ T27] audit: type=1804 audit(1782808447.235:123): pid=20302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3995" name="/newroot/176/file1/memory.events" dev="loop1" ino=18 res=1 errno=0 [ 1285.702913][T20337] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4009'. [ 1286.980232][T20362] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4018'. [ 1287.467200][T20380] libceph: resolve '400' (ret=-3): failed [ 1287.665182][T20384] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1288.992653][T20408] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4037'. [ 1289.306711][T20411] libceph: resolve '400' (ret=-3): failed [ 1289.883939][T20430] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.4045'. [ 1290.069665][T20432] loop1: detected capacity change from 0 to 16 [ 1290.083279][T20432] erofs: (device loop1): mounted with root inode @ nid 36. [ 1290.208712][T20434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4047'. [ 1291.803912][T20450] libceph: resolve '400' (ret=-3): failed [ 1292.091340][T20454] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.4054'. [ 1293.890863][T20459] loop0: detected capacity change from 0 to 16 [ 1293.900767][T20459] erofs: (device loop0): mounted with root inode @ nid 36. [ 1295.484707][T20481] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.4064'. [ 1295.510736][T20478] loop0: detected capacity change from 0 to 8192 [ 1301.122214][T20516] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1301.365129][T20523] libceph: resolve '400' (ret=-3): failed [ 1301.706394][T20526] loop1: detected capacity change from 0 to 8192 [ 1303.291580][T20549] loop1: detected capacity change from 0 to 256 [ 1303.308015][T20549] FAT-fs (loop1): Unrecognized mount option "uid=01777777777777777777777184467440737095516151844674407370955161501777777777777777777777" or missing value [ 1305.577961][T20596] libceph: resolve '400' (ret=-3): failed [ 1305.738948][T20598] loop4: detected capacity change from 0 to 16 [ 1305.765721][T20598] erofs: (device loop4): mounted with root inode @ nid 36. [ 1305.797982][T20598] syz.4.4105: attempt to access beyond end of device [ 1305.797982][T20598] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1305.880301][T20598] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1305.945231][ T27] audit: type=1800 audit(1782808467.056:124): pid=20598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4105" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1306.059327][T20605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4108'. [ 1306.506384][T20619] loop1: detected capacity change from 0 to 2048 [ 1306.713054][T20624] libceph: resolve '400' (ret=-3): failed [ 1306.720380][T20624] 9pnet_fd: Insufficient options for proto=fd [ 1307.409146][T20619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1307.430529][ T27] audit: type=1800 audit(1782808468.431:125): pid=20619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4113" name="memory.events" dev="loop1" ino=18 res=0 errno=0 [ 1307.463812][ T27] audit: type=1804 audit(1782808468.431:126): pid=20619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4113" name="/newroot/208/file1/memory.events" dev="loop1" ino=18 res=1 errno=0 [ 1307.556899][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1307.668744][T20629] loop4: detected capacity change from 0 to 16 [ 1307.755805][T20629] erofs: (device loop4): mounted with root inode @ nid 36. [ 1307.787406][T20634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4118'. [ 1308.259522][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1308.535683][T20629] syz.4.4117: attempt to access beyond end of device [ 1308.535683][T20629] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1308.667442][T20629] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1308.746752][ T27] audit: type=1800 audit(1782808469.650:127): pid=20629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4117" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1309.024891][T20649] loop4: detected capacity change from 0 to 2048 [ 1309.204562][T20649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.320955][ T27] audit: type=1800 audit(1782808470.167:128): pid=20649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4124" name="memory.events" dev="loop4" ino=18 res=0 errno=0 [ 1309.456320][ T27] audit: type=1804 audit(1782808470.167:129): pid=20649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4124" name="/newroot/255/file1/memory.events" dev="loop4" ino=18 res=1 errno=0 [ 1309.535986][T20664] libceph: resolve '400' (ret=-3): failed [ 1309.905434][T17218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.301853][T20643] loop0: detected capacity change from 0 to 32768 [ 1310.395158][T20643] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1310.489448][T20643] XFS (loop0): Ending clean mount [ 1310.672652][T17539] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1311.397057][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.403404][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1311.738694][T20702] netlink: 'syz.1.4141': attribute type 5 has an invalid length. [ 1311.759240][T20702] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1311.921644][T20705] loop0: detected capacity change from 0 to 16 [ 1311.981228][T20705] erofs: (device loop0): mounted with root inode @ nid 36. [ 1312.017426][T20705] syz.0.4142: attempt to access beyond end of device [ 1312.017426][T20705] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1312.061164][T20705] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1312.097094][T20711] loop4: detected capacity change from 0 to 16 [ 1312.111953][ T27] audit: type=1800 audit(1782808472.752:130): pid=20705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4142" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1312.122230][T20711] erofs: (device loop4): mounted with root inode @ nid 36. [ 1312.158323][T20711] syz.4.4145: attempt to access beyond end of device [ 1312.158323][T20711] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1312.183576][T20711] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1312.195554][ T27] audit: type=1800 audit(1782808472.835:131): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4145" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1312.235965][T20711] syz.4.4145: attempt to access beyond end of device [ 1312.235965][T20711] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1312.272480][T20711] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1312.295021][T20711] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1312.311406][T20711] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1312.691888][T20734] libceph: resolve '400' (ret=-3): failed [ 1313.401939][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1314.592974][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1314.882286][T20761] loop1: detected capacity change from 0 to 16 [ 1314.910886][T20763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1314.928645][T20761] erofs: (device loop1): mounted with root inode @ nid 36. [ 1314.947825][T20761] syz.1.4166: attempt to access beyond end of device [ 1314.947825][T20761] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1314.967831][T20761] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1314.985626][ T27] audit: type=1800 audit(1782808475.411:132): pid=20761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4166" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1315.008460][T20751] loop0: detected capacity change from 0 to 32768 [ 1315.013516][T20761] syz.1.4166: attempt to access beyond end of device [ 1315.013516][T20761] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1315.039737][T20761] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1315.067835][T20761] syz.1.4166: attempt to access beyond end of device [ 1315.067835][T20761] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1315.111946][T20761] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1315.148636][T20751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1315.251114][T20771] loop1: detected capacity change from 0 to 16 [ 1315.260160][T20771] erofs: (device loop1): mounted with root inode @ nid 36. [ 1315.270227][T20771] syz.1.4169: attempt to access beyond end of device [ 1315.270227][T20771] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1315.284672][T20771] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1315.296337][ T27] audit: type=1800 audit(1782808475.697:133): pid=20771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4169" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1315.330174][T20771] syz.1.4169: attempt to access beyond end of device [ 1315.330174][T20771] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1315.343923][T20771] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1315.356013][T20771] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1315.367032][T20771] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1315.513015][T17539] ocfs2: Unmounting device (7,0) on (node local) [ 1315.915635][T20782] netlink: 'syz.2.4174': attribute type 5 has an invalid length. [ 1315.926711][T20782] overlayfs: failed to clone lowerpath [ 1315.946586][T20782] overlayfs: failed to clone lowerpath [ 1316.080286][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4175'. [ 1317.171051][T20797] libceph: resolve '400' (ret=-3): failed [ 1319.377115][T20808] loop1: detected capacity change from 0 to 16 [ 1319.384869][T20808] erofs: (device loop1): mounted with root inode @ nid 36. [ 1319.417395][T20808] syz.1.4181: attempt to access beyond end of device [ 1319.417395][T20808] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1319.448459][T20808] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1319.488160][T20808] syz.1.4181: attempt to access beyond end of device [ 1319.488160][T20808] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1319.501774][T20808] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1319.512742][T20808] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1319.523695][T20808] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1319.625405][ T27] audit: type=1800 audit(1782808479.537:134): pid=20808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4181" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1320.281933][T20812] netlink: 'syz.2.4184': attribute type 5 has an invalid length. [ 1320.293414][T20812] overlayfs: failed to clone lowerpath [ 1320.300494][T20812] overlayfs: failed to clone lowerpath [ 1321.920023][T20840] autofs4:pid:20840:autofs_fill_super: called with bogus options [ 1322.150709][T20842] netlink: 'syz.1.4193': attribute type 5 has an invalid length. [ 1322.164456][T20842] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1322.429563][T20850] loop0: detected capacity change from 0 to 16 [ 1322.469694][T20850] erofs: (device loop0): mounted with root inode @ nid 36. [ 1322.489641][T20850] syz.0.4197: attempt to access beyond end of device [ 1322.489641][T20850] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1322.504897][T20850] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1322.524409][ T27] audit: type=1800 audit(1782808482.362:135): pid=20850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4197" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1322.789147][T20850] syz.0.4197: attempt to access beyond end of device [ 1322.789147][T20850] loop0: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1322.980445][T20850] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1323.199634][T20850] syz.0.4197: attempt to access beyond end of device [ 1323.199634][T20850] loop0: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1323.253845][T20850] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1326.164935][T20885] autofs4:pid:20885:autofs_fill_super: called with bogus options [ 1326.410219][T20896] libceph: resolve '400' (ret=-3): failed [ 1327.069286][T17509] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1327.288147][T17509] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1327.309928][T17509] usb 2-1: config 1 has no interface number 0 [ 1327.316072][T17509] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 1327.345072][T17509] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 1327.372515][T17509] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.383739][T17509] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.401867][T17509] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1327.419384][T17509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.428382][T17509] usb 2-1: Product: syz [ 1327.432607][T17509] usb 2-1: Manufacturer: syz [ 1327.437221][T17509] usb 2-1: SerialNumber: syz [ 1327.504419][T20922] loop4: detected capacity change from 0 to 16 [ 1327.634795][T20906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1327.641994][T20906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1327.699043][T17509] usb 2-1: Expected 3 endpoints, found: 2 [ 1328.382828][T20924] loop0: detected capacity change from 0 to 16 [ 1328.474407][T20924] erofs: (device loop0): mounted with root inode @ nid 36. [ 1328.497507][T20924] syz.0.4226: attempt to access beyond end of device [ 1328.497507][T20924] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1328.544881][T20924] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1328.585973][ T27] audit: type=1800 audit(1782808487.966:136): pid=20924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4226" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1330.211055][T16775] usb 2-1: USB disconnect, device number 12 [ 1330.614985][T20959] netlink: 'syz.1.4239': attribute type 1 has an invalid length. [ 1330.623784][T20959] netlink: 16118 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1330.639824][T20957] syzkaller0: entered promiscuous mode [ 1330.648819][T20957] syzkaller0: entered allmulticast mode [ 1330.862019][T20967] loop1: detected capacity change from 0 to 512 [ 1330.872342][T20967] EXT4-fs: Ignoring removed nobh option [ 1330.884267][T20967] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1330.972122][T20967] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1330.997591][T20963] loop4: detected capacity change from 0 to 8192 [ 1331.086296][T20967] EXT4-fs (loop1): 1 truncate cleaned up [ 1331.100337][T20967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.420363][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.459480][T20990] loop1: detected capacity change from 0 to 16 [ 1333.488920][T20990] erofs: (device loop1): mounted with root inode @ nid 36. [ 1333.499209][T20990] syz.1.4246: attempt to access beyond end of device [ 1333.499209][T20990] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1333.514973][T20990] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1333.527972][ T27] audit: type=1800 audit(1782808492.527:137): pid=20990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4246" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1333.552342][T20990] syz.1.4246: attempt to access beyond end of device [ 1333.552342][T20990] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1333.566057][T20990] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1333.577076][T20990] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1333.588088][T20990] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[8192] [ 1333.610986][T20996] netlink: 'syz.4.4250': attribute type 1 has an invalid length. [ 1333.646919][T20996] netlink: 16118 bytes leftover after parsing attributes in process `syz.4.4250'. [ 1333.993722][T21001] loop1: detected capacity change from 0 to 2048 [ 1334.361319][T21001] hpfs: hpfs_map_sector(): read error [ 1335.315837][T21015] loop0: detected capacity change from 0 to 16 [ 1335.949159][T21015] erofs: (device loop0): mounted with root inode @ nid 36. [ 1335.982330][T21015] syz.0.4255: attempt to access beyond end of device [ 1335.982330][T21015] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1336.042933][T21015] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1336.090650][ T27] audit: type=1800 audit(1782808494.890:138): pid=21015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4255" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1336.178329][T21029] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 1336.191929][T21029] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1336.307699][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4261'. [ 1338.985982][T21054] loop4: detected capacity change from 0 to 40427 [ 1339.012445][T21054] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1339.020343][T21054] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1339.144730][T21054] F2FS-fs (loop4): invalid crc value [ 1339.230515][T21054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1339.311883][T21054] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1339.318572][T21063] netlink: 'syz.2.4270': attribute type 1 has an invalid length. [ 1339.318972][T21054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1339.482739][T21063] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4270'. [ 1339.568634][ T27] audit: type=1800 audit(1782808498.094:139): pid=21065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4268" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1340.150911][T21069] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1341.596118][T21085] loop1: detected capacity change from 0 to 40427 [ 1341.607729][T21085] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1341.615494][T21085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1341.630154][T21085] F2FS-fs (loop1): invalid crc value [ 1341.653825][T21085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1341.722480][T21085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1341.729772][T21085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1341.965930][T21100] netlink: 'syz.2.4282': attribute type 1 has an invalid length. [ 1341.987953][T21100] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1342.092332][ T27] audit: type=1800 audit(1782808500.430:140): pid=21101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4279" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1342.589074][T21104] overlayfs: failed to clone lowerpath [ 1343.043966][T21121] netlink: 'syz.2.4292': attribute type 1 has an invalid length. [ 1343.051920][T21121] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1344.476789][T21148] netlink: 'syz.1.4301': attribute type 1 has an invalid length. [ 1344.513870][T21148] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4301'. [ 1347.772262][T21182] overlayfs: failed to clone lowerpath [ 1348.281115][T21194] netlink: 'syz.1.4311': attribute type 1 has an invalid length. [ 1348.311662][T21194] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1348.573981][T21178] loop0: detected capacity change from 0 to 65536 [ 1348.631993][T21178] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 1350.000097][T21219] loop4: detected capacity change from 0 to 4096 [ 1350.053793][T21222] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1353.635650][T21278] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1354.399830][T21298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1356.509907][T21305] loop1: detected capacity change from 0 to 8192 [ 1356.585054][T21313] loop0: detected capacity change from 0 to 128 [ 1356.662634][T21317] loop4: detected capacity change from 0 to 128 [ 1356.683177][T21313] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1356.709581][T21313] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.711138][T21317] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1356.807076][T21317] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.912101][T17218] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.008987][T17539] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.878640][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4366'. [ 1358.137159][T21330] autofs4:pid:21330:autofs_fill_super: called with bogus options [ 1359.266629][T21363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1361.752569][T21372] loop1: detected capacity change from 0 to 40427 [ 1361.770587][T21372] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1361.777700][T21372] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1361.789767][T21372] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff [ 1361.798495][T21372] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 1361.819816][T21372] F2FS-fs (loop1): invalid crc value [ 1363.246821][T21372] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1363.410171][T21387] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 1363.564720][T21372] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1363.577439][T21372] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1363.625608][ T27] audit: type=1800 audit(1782808520.297:141): pid=21369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4380" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1363.743181][T18014] syz-executor: attempt to access beyond end of device [ 1363.743181][T18014] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1363.770770][T18014] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1367.460631][T21458] autofs4:pid:21458:autofs_fill_super: called with bogus options [ 1367.472409][ T5837] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1367.531362][T21467] loop1: detected capacity change from 0 to 8 [ 1367.927124][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 1368.674698][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1368.687969][ T5837] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1368.697394][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.710022][ T5837] usb 1-1: config 0 descriptor?? [ 1369.212033][ T5837] greenasia 0003:0E8F:0012.0009: item fetching failed at offset 41/44 [ 1369.392221][ T5837] greenasia 0003:0E8F:0012.0009: parse failed [ 1369.576593][ T5837] greenasia: probe of 0003:0E8F:0012.0009 failed with error -22 [ 1369.836288][ T5837] usb 1-1: USB disconnect, device number 18 [ 1373.165747][T21530] loop1: detected capacity change from 0 to 512 [ 1373.318594][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 1373.318701][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x74 [ 1373.326986][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 1373.334783][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x66 [ 1373.341829][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 1373.351142][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x5f [ 1373.360074][ T5782] Bluetooth: hci2: unknown advertising packet type: 0x30 [ 1373.737576][ T5782] Bluetooth: hci4: unexpected event for opcode 0x0804 [ 1375.683096][ T175] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1375.908521][ T175] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.920871][ T175] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1375.938762][ T175] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 1375.957313][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.976718][ T175] usb 1-1: Product: syz [ 1375.986170][ T175] usb 1-1: Manufacturer: syz [ 1375.995504][ T175] usb 1-1: SerialNumber: syz [ 1376.010341][ T175] usb 1-1: config 0 descriptor?? [ 1377.216175][ T175] usb 1-1: USB disconnect, device number 19 [ 1377.941704][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1377.948319][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1379.729653][T21617] libceph: resolve '400' (ret=-3): failed [ 1380.470654][T21626] loop0: detected capacity change from 0 to 1024 [ 1380.512250][T21626] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1380.551331][T21626] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1380.603898][T21626] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1380.632188][T21626] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1380.646312][T21626] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1380.660737][T21626] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.4468: Failed to acquire dquot type 0 [ 1380.674540][T21626] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1380.686792][T21626] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1380.696943][T21626] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.4468: Failed to acquire dquot type 0 [ 1380.714225][T21626] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.4468: Freeing blocks not in datazone - block = 0, count = 4096 [ 1380.742547][T21626] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 1380.753994][T21626] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1380.767717][T21626] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.4468: Failed to acquire dquot type 0 [ 1380.788235][T21626] EXT4-fs (loop0): 1 orphan inode deleted [ 1380.815259][T21626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1380.910585][T21626] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.4468: iget: bad extended attribute block 6 [ 1380.960149][T17539] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.932814][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 1383.194398][T21675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1383.409697][T17509] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1384.971906][T17509] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1384.981294][T17509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.989564][T17509] usb 5-1: Product: syz [ 1384.993748][T17509] usb 5-1: Manufacturer: syz [ 1384.999185][T17509] usb 5-1: SerialNumber: syz [ 1385.009234][T17509] usb 5-1: config 0 descriptor?? [ 1385.026766][T21698] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 1385.034833][T21698] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.4494'. [ 1385.108665][T21701] libceph: resolve '400' (ret=-3): failed [ 1385.249124][T17509] usb 5-1: ignoring: probably an ADSL modem [ 1385.688324][T17509] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1385.823252][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 1385.924660][T16508] usb 5-1: USB disconnect, device number 12 [ 1387.520212][T21721] netlink: 'syz.4.4503': attribute type 1 has an invalid length. [ 1387.535732][T21721] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4503'. [ 1387.680824][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4505'. [ 1388.031993][T21733] libceph: resolve '400' (ret=-3): failed [ 1388.401838][T18000] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1388.617587][T18000] usb 2-1: Using ep0 maxpacket: 32 [ 1388.634849][T18000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.667303][T18000] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1388.695164][T18000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.718269][T18000] usb 2-1: Product: syz [ 1388.726545][T18000] usb 2-1: Manufacturer: syz [ 1388.731181][T18000] usb 2-1: SerialNumber: syz [ 1388.743634][T18000] usb 2-1: config 0 descriptor?? [ 1388.762053][T18000] redrat3 2-1:0.0: Couldn't find all endpoints [ 1389.110012][T18000] usb 2-1: USB disconnect, device number 13 [ 1389.507739][T21753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1390.996363][T21780] libceph: resolve '400' (ret=-3): failed [ 1391.174924][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4527'. [ 1393.420985][T21803] loop1: detected capacity change from 0 to 8 [ 1393.663106][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4539'. [ 1396.859278][T21836] Bluetooth: MGMT ver 1.22 [ 1397.196025][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4551'. [ 1397.719444][T21846] libceph: resolve '400' (ret=-3): failed [ 1400.597426][T21876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4563'. [ 1401.943688][T21894] binder: 21889:21894 ioctl c0306201 0 returned -14 [ 1402.971896][T21903] loop0: detected capacity change from 0 to 16 [ 1403.124761][T21903] erofs: (device loop0): mounted with root inode @ nid 36. [ 1403.485307][T21903] syz.0.4573: attempt to access beyond end of device [ 1403.485307][T21903] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1403.516069][T21903] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1403.529508][ T27] audit: type=1800 audit(1782808557.151:142): pid=21903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4573" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1403.646991][T21912] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4579'. [ 1405.388863][T21905] loop1: detected capacity change from 0 to 32768 [ 1405.528776][T21905] (syz.1.4577,21905,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 1405.538754][T21905] (syz.1.4577,21905,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1406.236023][T17224] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1406.651142][T17509] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1406.708193][T21945] loop4: detected capacity change from 0 to 4096 [ 1406.734559][T21945] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1406.874027][T17509] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1406.897489][T17509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.922136][T21954] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4597'. [ 1406.927884][T17509] usb 1-1: Product: syz [ 1406.965575][T17509] usb 1-1: Manufacturer: syz [ 1406.972713][T17509] usb 1-1: SerialNumber: syz [ 1406.993116][T17509] usb 1-1: config 0 descriptor?? [ 1407.338182][T17509] cx82310_eth: probe of 1-1:0.0 failed with error -22 [ 1407.581512][T17509] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1407.632510][T17509] usb 1-1: USB disconnect, device number 20 [ 1407.684627][T17224] udevd[17224]: setting owner of /dev/bus/usb/001/020 to uid=0, gid=0 failed: No such file or directory [ 1408.654278][T21989] libceph: resolve '400' (ret=-3): failed [ 1409.042311][T21997] usb usb7: usbfs: process 21997 (syz.4.4614) did not claim interface 0 before use [ 1409.068703][T21995] loop1: detected capacity change from 0 to 512 [ 1409.160874][T21995] EXT4-fs (loop1): 1 truncate cleaned up [ 1409.178983][T21995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1409.334990][ T27] audit: type=1800 audit(1782808562.487:143): pid=21995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4615" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1409.447351][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.515664][T22003] loop0: detected capacity change from 0 to 32768 [ 1409.530630][T22003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4616 (22003) [ 1409.578094][T22003] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1409.588504][T22003] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1409.598141][T22003] BTRFS info (device loop0): using free space tree [ 1409.745208][T22003] BTRFS info (device loop0): enabling ssd optimizations [ 1409.752335][T22003] BTRFS info (device loop0): auto enabling async discard [ 1409.817806][T22003] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1411.532286][T17227] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (17227) [ 1411.986005][T22048] loop1: detected capacity change from 0 to 2048 [ 1412.033909][T22048] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1412.051098][T22048] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1412.114218][T22048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1413.790121][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4630'. [ 1413.839607][T22057] ip6gretap0: entered promiscuous mode [ 1413.847120][T22057] macvtap1: entered promiscuous mode [ 1413.852795][T22057] macvtap1: entered allmulticast mode [ 1413.858512][T22057] ip6gretap0: entered allmulticast mode [ 1413.986426][T22062] loop4: detected capacity change from 0 to 16 [ 1414.008971][T22062] erofs: (device loop4): mounted with root inode @ nid 36. [ 1414.034265][T22062] syz.4.4633: attempt to access beyond end of device [ 1414.034265][T22062] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1414.093581][T22062] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1414.151091][ T27] audit: type=1800 audit(1782808566.946:144): pid=22062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4633" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 1415.485769][T22090] loop1: detected capacity change from 0 to 512 [ 1415.649315][T22090] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.4642: missing EA_INODE flag [ 1415.726906][T22090] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.4642: error while reading EA inode 12 err=-117 [ 1415.802190][T22090] EXT4-fs (loop1): 1 orphan inode deleted [ 1415.823767][T22090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1416.735263][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.241528][T22129] loop1: detected capacity change from 0 to 256 [ 1417.258184][T22129] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1417.567563][T22129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1419.486655][T22160] overlayfs: failed to clone lowerpath [ 1421.775374][T22171] loop4: detected capacity change from 0 to 8192 [ 1422.001637][T22177] libceph: resolve '400' (ret=-3): failed [ 1422.868215][T22187] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1424.137375][T22199] loop4: detected capacity change from 0 to 40427 [ 1424.193414][T22199] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1424.201756][T22199] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1424.213021][T22199] F2FS-fs (loop4): invalid crc value [ 1424.256224][T22199] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1424.348409][T22199] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1424.356156][T22199] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1424.595362][ T27] audit: type=1800 audit(1782808576.594:145): pid=22207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4683" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1426.238019][T22195] loop0: detected capacity change from 0 to 65536 [ 1426.325313][T22195] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1426.553368][T22195] XFS (loop0): Ending clean mount [ 1426.649107][T17539] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 1427.980410][T22239] loop4: detected capacity change from 0 to 40427 [ 1428.004592][T22239] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1428.012403][T22239] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1428.036974][T22239] F2FS-fs (loop4): invalid crc value [ 1428.057766][T22243] loop1: detected capacity change from 0 to 16 [ 1428.057765][T22247] loop0: detected capacity change from 0 to 16 [ 1428.067104][T22239] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1428.077684][T22247] erofs: (device loop0): mounted with root inode @ nid 36. [ 1428.088231][T22243] erofs: (device loop1): mounted with root inode @ nid 36. [ 1428.099745][ T5782] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 1428.134852][T22243] syz.1.4694: attempt to access beyond end of device [ 1428.134852][T22243] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1428.149302][T22247] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 1428.164887][T22243] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1428.176398][ T27] audit: type=1800 audit(1782808579.908:146): pid=22247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4691" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1428.184461][T22239] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1428.196708][ T27] audit: type=1800 audit(1782808579.908:147): pid=22243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4694" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1428.203214][T22239] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1428.576742][ T27] audit: type=1800 audit(1782808580.249:148): pid=22251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4693" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1428.911490][T22253] loop1: detected capacity change from 0 to 16 [ 1428.964071][T22253] erofs: (device loop1): mounted with root inode @ nid 36. [ 1429.036466][T22253] syz.1.4695: attempt to access beyond end of device [ 1429.036466][T22253] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1429.079412][T22253] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1429.097256][ T27] audit: type=1800 audit(1782808580.748:149): pid=22253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4695" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1429.196592][T22253] syz.1.4695: attempt to access beyond end of device [ 1429.196592][T22253] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1429.214285][T22253] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1429.300662][T22253] syz.1.4695: attempt to access beyond end of device [ 1429.300662][T22253] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1429.383173][T22253] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1431.538057][T22270] loop1: detected capacity change from 0 to 512 [ 1431.753702][T22270] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1431.962715][T22270] EXT4-fs (loop1): 1 truncate cleaned up [ 1431.978567][T22270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1432.167140][T18014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.962534][T22297] loop4: detected capacity change from 0 to 512 [ 1434.007104][T22297] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1434.060508][T22297] UDF-fs: Scanning with blocksize 512 failed [ 1434.116975][T22297] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1434.154480][T22297] UDF-fs: Scanning with blocksize 1024 failed [ 1434.196981][T22297] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 1434.238382][T22297] UDF-fs: Scanning with blocksize 2048 failed [ 1434.279252][T22297] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1434.314986][T22297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1436.875145][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 1437.460289][T22323] loop0: detected capacity change from 0 to 40427 [ 1437.476607][T22323] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1437.564084][T22333] program syz.1.4720 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.684659][T22323] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1438.149012][T22323] F2FS-fs (loop0): invalid crc value [ 1438.297744][T22323] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1438.480269][T22323] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1438.490333][T22344] loop4: detected capacity change from 0 to 256 [ 1438.511278][T22323] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1438.596789][T22344] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1439.450839][ T27] audit: type=1800 audit(1782808590.303:150): pid=22356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4717" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1440.298580][T22370] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1441.025454][T22364] loop4: detected capacity change from 0 to 40427 [ 1441.042298][T22364] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1441.050068][T22364] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1441.060417][T22364] F2FS-fs (loop4): invalid crc value [ 1441.088068][T22364] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1441.513812][T22364] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1441.569055][T22364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1442.005204][T22387] loop1: detected capacity change from 0 to 16 [ 1442.045437][T22387] erofs: (device loop1): mounted with root inode @ nid 36. [ 1442.056027][T22387] syz.1.4736: attempt to access beyond end of device [ 1442.056027][T22387] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1442.102806][T22387] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1442.115297][ T27] audit: type=1800 audit(1782808592.777:151): pid=22387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4736" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1442.202202][T22387] syz.1.4736: attempt to access beyond end of device [ 1442.202202][T22387] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1442.663554][T22387] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1442.797181][ T27] audit: type=1800 audit(1782808593.248:152): pid=22364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4729" name="file1" dev="loop4" ino=11 res=0 errno=0 [ 1442.821654][T22387] syz.1.4736: attempt to access beyond end of device [ 1442.821654][T22387] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1442.905493][T22387] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1443.160574][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4740'. [ 1443.176439][T22395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.371661][T22395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1444.496011][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1444.502445][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1444.783874][T22424] loop1: detected capacity change from 0 to 16 [ 1444.835723][T22424] erofs: (device loop1): mounted with root inode @ nid 36. [ 1444.868691][T22424] syz.1.4749: attempt to access beyond end of device [ 1444.868691][T22424] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1444.910011][T22424] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1444.943726][ T27] audit: type=1800 audit(1782808595.390:153): pid=22424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4749" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1444.955002][T22424] syz.1.4749: attempt to access beyond end of device [ 1444.955002][T22424] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1445.000254][T22424] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1445.033234][T22424] syz.1.4749: attempt to access beyond end of device [ 1445.033234][T22424] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 1445.050182][T22424] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[9000] [ 1449.268438][T22476] netlink: 'syz.2.4768': attribute type 63 has an invalid length. [ 1450.395545][T22485] loop4: detected capacity change from 0 to 8192 [ 1450.823960][T22474] loop1: detected capacity change from 0 to 40427 [ 1450.841150][T22474] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1450.863375][T22474] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1450.894927][T22474] F2FS-fs (loop1): invalid crc value [ 1450.948271][T22474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1451.313938][T22474] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1451.346791][T22474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1453.925225][T22518] loop0: detected capacity change from 0 to 40427 [ 1453.946694][T22518] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1453.978135][T22518] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1454.002970][T22518] F2FS-fs (loop0): invalid crc value [ 1454.035385][T22518] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1454.178468][T22518] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1454.187969][T22518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1454.996599][ T27] audit: type=1800 audit(1782808604.650:154): pid=22548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4785" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1455.657034][T22555] loop4: detected capacity change from 0 to 512 [ 1455.713555][T22555] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1455.852139][T22555] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.4796: bg 0: block 255: padding at end of block bitmap is not set [ 1455.933409][T22555] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1455.964580][T22555] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.4796: invalid indirect mapped block 1 (level 1) [ 1455.985762][T22555] EXT4-fs (loop4): 1 truncate cleaned up [ 1455.997807][T22555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1456.301121][T17218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.224990][T22579] loop0: detected capacity change from 0 to 8192 [ 1459.519019][T22612] loop1: detected capacity change from 0 to 40427 [ 1459.568865][T22612] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1459.576724][T22612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1459.596676][T22612] F2FS-fs (loop1): invalid crc value [ 1459.605795][T22612] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1459.658067][T22612] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1459.665526][T22612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1459.935913][T22618] loop4: detected capacity change from 0 to 8192 [ 1460.675219][ T27] audit: type=1800 audit(1782808609.284:155): pid=22623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4814" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1461.208210][T22626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'. [ 1461.558438][T18071] kworker/u4:17: attempt to access beyond end of device [ 1461.558438][T18071] loop1: rw=1, sector=77824, nr_sectors = 2048 limit=40427 [ 1461.949358][T18071] kworker/u4:17: attempt to access beyond end of device [ 1461.949358][T18071] loop1: rw=1, sector=79872, nr_sectors = 2048 limit=40427 [ 1462.613321][T18071] kworker/u4:17: attempt to access beyond end of device [ 1462.613321][T18071] loop1: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 1462.997561][T18071] kworker/u4:17: attempt to access beyond end of device [ 1462.997561][T18071] loop1: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 1463.072442][T18071] kworker/u4:17: attempt to access beyond end of device [ 1463.072442][T18071] loop1: rw=1, sector=57344, nr_sectors = 3128 limit=40427 [ 1463.780632][T22649] loop0: detected capacity change from 0 to 16 [ 1463.832942][T22649] erofs: (device loop0): mounted with root inode @ nid 36. [ 1463.878247][T22649] syz.0.4826: attempt to access beyond end of device [ 1463.878247][T22649] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 1463.954477][T22649] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -48 in[55, 4041] out[4096] [ 1463.972010][ T27] audit: type=1800 audit(1782808612.949:156): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4826" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1464.231204][T22660] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1464.257727][T22660] CIFS mount error: No usable UNC path provided in device string! [ 1464.257727][T22660] [ 1464.268288][T22660] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1465.167611][T22664] netlink: 'syz.2.4830': attribute type 1 has an invalid length. [ 1465.219188][T22664] netlink: 'syz.2.4830': attribute type 4 has an invalid length. [ 1465.227006][T22664] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4830'. [ 1467.194167][T22702] loop4: detected capacity change from 0 to 512 [ 1467.211244][T22702] EXT4-fs: inline encryption not supported [ 1467.275803][T22702] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1467.323741][T22702] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.4842: invalid indirect mapped block 256 (level 1) [ 1467.387571][T22702] EXT4-fs (loop4): Remounting filesystem read-only [ 1467.411650][T22702] EXT4-fs (loop4): 1 truncate cleaned up [ 1467.425779][T22702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.581365][T17218] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.744011][T22728] loop4: detected capacity change from 0 to 4096 [ 1468.766341][T22728] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1468.803475][T22728] ntfs3: loop4: Failed to load $AttrDef (-22) [ 1472.627071][T22759] loop0: detected capacity change from 0 to 32768 [ 1472.676531][T22759] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1473.052631][T17539] ocfs2: Unmounting device (7,0) on (node local) [ 1475.038326][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1475.054563][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1475.063469][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1475.077756][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1475.086990][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1475.094313][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1477.329316][ T5779] Bluetooth: hci3: command tx timeout [ 1478.114112][T22797] chnl_net:caif_netlink_parms(): no params data found [ 1478.498339][T22797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.505806][T22797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.515132][T22797] bridge_slave_0: entered allmulticast mode [ 1478.523420][T22797] bridge_slave_0: entered promiscuous mode [ 1478.537969][T22797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.545827][T22797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.566188][T22797] bridge_slave_1: entered allmulticast mode [ 1478.579581][T22797] bridge_slave_1: entered promiscuous mode [ 1478.655726][T22797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.746523][T18073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.772194][T22835] binder: 22834:22835 ioctl c0306201 0 returned -14 [ 1478.798522][T22797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1479.076767][T18073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.165487][T22797] team0: Port device team_slave_0 added [ 1479.176322][T22797] team0: Port device team_slave_1 added [ 1479.332754][T18073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.383182][T22797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1479.402314][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.471073][T22797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1479.508272][T22797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1479.527503][T22797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1479.588155][ T5779] Bluetooth: hci3: command tx timeout [ 1479.629517][T22797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1479.929813][T18073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.114127][T22797] hsr_slave_0: entered promiscuous mode [ 1480.383896][T22797] hsr_slave_1: entered promiscuous mode [ 1481.835351][ T5779] Bluetooth: hci3: command tx timeout [ 1484.088242][ T5779] Bluetooth: hci3: command tx timeout [ 1485.636148][T22894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4893'. [ 1485.658512][T22797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1485.675970][T22797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1485.695090][T22797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1485.730704][T22797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1485.964816][T22894] loop4: detected capacity change from 0 to 40427 [ 1485.972854][T22894] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1485.980686][T22894] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1485.994024][T22894] F2FS-fs (loop4): invalid crc value [ 1486.039284][T22894] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1486.306376][T22894] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1486.313663][T22894] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1487.664201][T22797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.733100][T22797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.826904][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.834073][ T8792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.882108][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.889281][ T8792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.173770][T22916] loop0: detected capacity change from 0 to 32768 [ 1488.187697][T18073] hsr_slave_0: left promiscuous mode [ 1488.224662][T18073] hsr_slave_1: left promiscuous mode [ 1488.262539][T22916] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1488.323693][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1488.331255][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1488.366236][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1488.374422][T18073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1488.546393][T18073] bridge_slave_1: left allmulticast mode [ 1488.569491][T22925] loop1: detected capacity change from 0 to 64 [ 1488.589006][T18073] bridge_slave_1: left promiscuous mode [ 1488.862929][T22927] overlayfs: upper fs does not support tmpfile. [ 1488.923224][T22927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1488.942183][T22927] [ 1488.944551][T22927] ====================================================== [ 1488.951576][T22927] WARNING: possible circular locking dependency detected [ 1488.958607][T22927] syzkaller #0 Not tainted [ 1488.963112][T22927] ------------------------------------------------------ [ 1488.970128][T22927] syz.0.4900/22927 is trying to acquire lock: [ 1488.976187][T22927] ffff88805ab6b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1488.989475][T22927] [ 1488.989475][T22927] but task is already holding lock: [ 1488.996823][T22927] ffff88805abab1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1489.006297][T22927] [ 1489.006297][T22927] which lock already depends on the new lock. [ 1489.006297][T22927] [ 1489.016688][T22927] [ 1489.016688][T22927] the existing dependency chain (in reverse order) is: [ 1489.025687][T22927] [ 1489.025687][T22927] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1489.033484][T22927] down_read+0x46/0x2e0 [ 1489.038239][T22927] ocfs2_init_acl+0x30a/0x770 [ 1489.043423][T22927] ocfs2_mknod+0x1427/0x2310 [ 1489.048519][T22927] ocfs2_create+0x196/0x430 [ 1489.053529][T22927] path_openat+0x1705/0x3270 [ 1489.058644][T22927] do_filp_open+0x1f2/0x430 [ 1489.063648][T22927] do_sys_openat2+0x134/0x1d0 [ 1489.068840][T22927] __x64_sys_openat+0x139/0x160 [ 1489.074208][T22927] do_syscall_64+0x55/0xb0 [ 1489.079172][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.085645][T22927] [ 1489.085645][T22927] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1489.094137][T22927] down_read+0x46/0x2e0 [ 1489.098804][T22927] ocfs2_start_trans+0x3a8/0x6f0 [ 1489.104253][T22927] ocfs2_mknod+0xf33/0x2310 [ 1489.109260][T22927] ocfs2_create+0x196/0x430 [ 1489.114278][T22927] path_openat+0x1705/0x3270 [ 1489.119374][T22927] do_filp_open+0x1f2/0x430 [ 1489.124391][T22927] do_sys_openat2+0x134/0x1d0 [ 1489.129756][T22927] __x64_sys_openat+0x139/0x160 [ 1489.135200][T22927] do_syscall_64+0x55/0xb0 [ 1489.140123][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.146527][T22927] [ 1489.146527][T22927] -> #2 (sb_internal#7){.+.+}-{0:0}: [ 1489.154007][T22927] ocfs2_start_trans+0x2a9/0x6f0 [ 1489.159453][T22927] ocfs2_mknod+0xf33/0x2310 [ 1489.164470][T22927] ocfs2_create+0x196/0x430 [ 1489.169475][T22927] path_openat+0x1705/0x3270 [ 1489.174563][T22927] do_filp_open+0x1f2/0x430 [ 1489.179567][T22927] do_sys_openat2+0x134/0x1d0 [ 1489.184746][T22927] __x64_sys_openat+0x139/0x160 [ 1489.190102][T22927] do_syscall_64+0x55/0xb0 [ 1489.195046][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.201456][T22927] [ 1489.201456][T22927] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}: [ 1489.211952][T22927] down_write+0x97/0x200 [ 1489.216700][T22927] ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 1489.223359][T22927] ocfs2_reserve_clusters_with_limit+0x1ba/0xc20 [ 1489.230185][T22927] ocfs2_mknod+0xed1/0x2310 [ 1489.235188][T22927] ocfs2_create+0x196/0x430 [ 1489.240191][T22927] path_openat+0x1705/0x3270 [ 1489.245287][T22927] do_filp_open+0x1f2/0x430 [ 1489.250307][T22927] do_sys_openat2+0x134/0x1d0 [ 1489.255487][T22927] __x64_sys_openat+0x139/0x160 [ 1489.260860][T22927] do_syscall_64+0x55/0xb0 [ 1489.265787][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.272209][T22927] [ 1489.272209][T22927] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1489.282700][T22927] __lock_acquire+0x37ef/0x7d80 [ 1489.288057][T22927] lock_acquire+0x19e/0x420 [ 1489.293064][T22927] down_write+0x97/0x200 [ 1489.297809][T22927] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1489.304201][T22927] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1489.311032][T22927] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1489.317168][T22927] ocfs2_xattr_set+0xc75/0x13a0 [ 1489.322528][T22927] __vfs_setxattr+0x437/0x470 [ 1489.327710][T22927] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1489.333499][T22927] vfs_setxattr+0x16b/0x2f0 [ 1489.338503][T22927] ovl_get_workdir+0xc62/0x17c0 [ 1489.343904][T22927] ovl_fill_super+0x151a/0x3970 [ 1489.349254][T22927] get_tree_nodev+0xb5/0x140 [ 1489.354349][T22927] vfs_get_tree+0x8c/0x280 [ 1489.359266][T22927] do_new_mount+0x24a/0xa40 [ 1489.364272][T22927] __se_sys_mount+0x2e7/0x3d0 [ 1489.369451][T22927] do_syscall_64+0x55/0xb0 [ 1489.374370][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.380772][T22927] [ 1489.380772][T22927] other info that might help us debug this: [ 1489.380772][T22927] [ 1489.390979][T22927] Chain exists of: [ 1489.390979][T22927] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1489.390979][T22927] [ 1489.407901][T22927] Possible unsafe locking scenario: [ 1489.407901][T22927] [ 1489.415329][T22927] CPU0 CPU1 [ 1489.420668][T22927] ---- ---- [ 1489.426012][T22927] lock(&oi->ip_xattr_sem); [ 1489.430580][T22927] lock(&journal->j_trans_barrier); [ 1489.438363][T22927] lock(&oi->ip_xattr_sem); [ 1489.445456][T22927] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 1489.452722][T22927] [ 1489.452722][T22927] *** DEADLOCK *** [ 1489.452722][T22927] [ 1489.460846][T22927] 4 locks held by syz.0.4900/22927: [ 1489.466018][T22927] #0: ffff8880644f60e0 (&type->s_umount_key#86/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x910 [ 1489.476090][T22927] #1: ffff88802d086418 (sb_writers#30){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1489.485295][T22927] #2: ffff88805abab498 (&sb->s_type->i_mutex_key#33){++++}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 1489.495717][T22927] #3: ffff88805abab1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1489.505612][T22927] [ 1489.505612][T22927] stack backtrace: [ 1489.511487][T22927] CPU: 1 PID: 22927 Comm: syz.0.4900 Not tainted syzkaller #0 [ 1489.518921][T22927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1489.528968][T22927] Call Trace: [ 1489.532307][T22927] [ 1489.535289][T22927] dump_stack_lvl+0x18c/0x250 [ 1489.539987][T22927] ? load_image+0x420/0x420 [ 1489.544517][T22927] ? show_regs_print_info+0x20/0x20 [ 1489.549700][T22927] ? print_circular_bug+0x12b/0x1a0 [ 1489.554883][T22927] check_noncircular+0x2fc/0x400 [ 1489.559810][T22927] ? print_deadlock_bug+0x5d0/0x5d0 [ 1489.564994][T22927] ? lockdep_lock+0xf5/0x230 [ 1489.569563][T22927] ? _find_first_zero_bit+0xd6/0x100 [ 1489.574853][T22927] __lock_acquire+0x37ef/0x7d80 [ 1489.579683][T22927] ? lock_chain_get_class+0x30/0xb0 [ 1489.584868][T22927] ? __lock_acquire+0x7d80/0x7d80 [ 1489.589873][T22927] ? verify_lock_unused+0x140/0x140 [ 1489.595054][T22927] ? preempt_schedule+0xc0/0xd0 [ 1489.599890][T22927] ? preempt_schedule_common+0x82/0xc0 [ 1489.605334][T22927] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1489.610954][T22927] ? do_raw_spin_lock+0x11f/0x2b0 [ 1489.615960][T22927] ? mutex_unlock+0x10/0x10 [ 1489.620466][T22927] lock_acquire+0x19e/0x420 [ 1489.624968][T22927] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1489.631041][T22927] ? ocfs2_get_system_file_inode+0x1f1/0x820 [ 1489.637012][T22927] ? __might_sleep+0xe0/0xe0 [ 1489.641591][T22927] ? read_lock_is_recursive+0x20/0x20 [ 1489.646948][T22927] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1489.653085][T22927] ? verify_lock_unused+0x130/0x140 [ 1489.658270][T22927] down_write+0x97/0x200 [ 1489.662500][T22927] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1489.668549][T22927] ? down_read_killable+0x340/0x340 [ 1489.673734][T22927] ? mark_lock+0x94/0x320 [ 1489.678050][T22927] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1489.683934][T22927] ? lock_chain_count+0x20/0x20 [ 1489.688765][T22927] ? preempt_schedule+0xc0/0xd0 [ 1489.693598][T22927] ? preempt_schedule_common+0x82/0xc0 [ 1489.699037][T22927] ? preempt_schedule+0xc0/0xd0 [ 1489.703871][T22927] ? schedule_preempt_disabled+0x20/0x20 [ 1489.709489][T22927] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1489.715634][T22927] ? preempt_schedule_thunk+0x1a/0x30 [ 1489.721008][T22927] ? ocfs2_block_group_search+0x470/0x470 [ 1489.726723][T22927] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 1489.732688][T22927] ? _raw_spin_unlock+0x40/0x40 [ 1489.737526][T22927] ? __stack_depot_save+0x575/0x660 [ 1489.745770][T22927] ? kasan_set_track+0x5f/0x70 [ 1489.750698][T22927] ? kasan_set_track+0x4e/0x70 [ 1489.755448][T22927] ? __kasan_kmalloc+0x8f/0xa0 [ 1489.760202][T22927] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1489.766685][T22927] ? ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1489.772473][T22927] ? ocfs2_xattr_set+0xc75/0x13a0 [ 1489.777485][T22927] ? __vfs_setxattr+0x437/0x470 [ 1489.782318][T22927] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 1489.787762][T22927] ? vfs_setxattr+0x16b/0x2f0 [ 1489.792424][T22927] ? ovl_get_workdir+0xc62/0x17c0 [ 1489.797428][T22927] ? ovl_fill_super+0x151a/0x3970 [ 1489.802432][T22927] ? get_tree_nodev+0xb5/0x140 [ 1489.807193][T22927] ? vfs_get_tree+0x8c/0x280 [ 1489.811763][T22927] ? do_new_mount+0x24a/0xa40 [ 1489.816421][T22927] ? __se_sys_mount+0x2e7/0x3d0 [ 1489.821250][T22927] ? do_syscall_64+0x55/0xb0 [ 1489.825824][T22927] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1489.831890][T22927] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1489.838201][T22927] ? ocfs2_init_steal_slots+0x160/0x160 [ 1489.843726][T22927] ? ocfs2_xattr_block_set+0x2dc0/0x2dc0 [ 1489.849348][T22927] ocfs2_init_xattr_set_ctxt+0x30b/0x710 [ 1489.854966][T22927] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 1489.861017][T22927] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1489.866637][T22927] ocfs2_xattr_set+0xc75/0x13a0 [ 1489.871474][T22927] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 1489.877175][T22927] ? mark_lock+0x94/0x320 [ 1489.881486][T22927] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1489.887450][T22927] ? lock_chain_count+0x20/0x20 [ 1489.892280][T22927] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1489.897897][T22927] ? lockdep_hardirqs_on+0x98/0x150 [ 1489.903078][T22927] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1489.908707][T22927] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 1489.914157][T22927] ? ocfs2_xattr_trusted_set+0x23/0x50 [ 1489.919604][T22927] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 1489.925051][T22927] __vfs_setxattr+0x437/0x470 [ 1489.929721][T22927] __vfs_setxattr_noperm+0x12a/0x5e0 [ 1489.934999][T22927] vfs_setxattr+0x16b/0x2f0 [ 1489.939492][T22927] ? xattr_permission+0x460/0x460 [ 1489.944500][T22927] ? up_write+0x1be/0x410 [ 1489.948812][T22927] ovl_get_workdir+0xc62/0x17c0 [ 1489.953645][T22927] ? ovl_fill_super+0x3970/0x3970 [ 1489.958652][T22927] ? preempt_schedule+0xc0/0xd0 [ 1489.963490][T22927] ? __lock_acquire+0x7d80/0x7d80 [ 1489.968498][T22927] ? preempt_schedule_thunk+0x1a/0x30 [ 1489.973857][T22927] ? _raw_spin_unlock+0x3a/0x40 [ 1489.978697][T22927] ? ovl_inuse_trylock+0xbd/0xd0 [ 1489.983623][T22927] ovl_fill_super+0x151a/0x3970 [ 1489.988459][T22927] ? ida_alloc_range+0x7d0/0x860 [ 1489.993446][T22927] ? virtio_fs_zero_page_range+0x140/0x140 [ 1489.999238][T22927] ? sget_fc+0x7f5/0x8d0 [ 1490.003465][T22927] ? __lock_acquire+0x7d80/0x7d80 [ 1490.008474][T22927] ? down_write+0x16e/0x200 [ 1490.012964][T22927] ? sget_fc+0x7f5/0x8d0 [ 1490.017187][T22927] ? kill_litter_super+0xb0/0xb0 [ 1490.022103][T22927] ? virtio_fs_zero_page_range+0x140/0x140 [ 1490.027899][T22927] get_tree_nodev+0xb5/0x140 [ 1490.032468][T22927] vfs_get_tree+0x8c/0x280 [ 1490.036865][T22927] do_new_mount+0x24a/0xa40 [ 1490.041347][T22927] __se_sys_mount+0x2e7/0x3d0 [ 1490.046007][T22927] ? __x64_sys_mount+0xc0/0xc0 [ 1490.050753][T22927] ? lockdep_hardirqs_on+0x98/0x150 [ 1490.055935][T22927] ? __x64_sys_mount+0x20/0xc0 [ 1490.060683][T22927] do_syscall_64+0x55/0xb0 [ 1490.065082][T22927] ? clear_bhb_loop+0x40/0x90 [ 1490.069742][T22927] ? clear_bhb_loop+0x40/0x90 [ 1490.074398][T22927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1490.080288][T22927] RIP: 0033:0x7fdb2299ce59 [ 1490.084735][T22927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.104366][T22927] RSP: 002b:00007fdb23783028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1490.112840][T22927] RAX: ffffffffffffffda RBX: 00007fdb22c16180 RCX: 00007fdb2299ce59 [ 1490.120793][T22927] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1490.128833][T22927] RBP: 00007fdb22a32e6f R08: 0000200000000400 R09: 0000000000000000 [ 1490.136787][T22927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.144738][T22927] R13: 00007fdb22c16218 R14: 00007fdb22c16180 R15: 00007ffd2bc98688 [ 1490.152697][T22927] [ 1490.388444][T22927] overlayfs: upper fs missing required features. [ 1490.484441][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.045451][T18073] bridge_slave_0: left allmulticast mode [ 1491.099451][T18073] bridge_slave_0: left promiscuous mode [ 1491.105194][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.184069][T18551] ocfs2: Unmounting device (7,0) on (node local) [ 1491.305754][T18073] veth1_macvtap: left promiscuous mode [ 1491.311244][T18073] veth0_macvtap: left promiscuous mode [ 1491.338142][T18073] veth1_vlan: left promiscuous mode [ 1491.343438][T18073] veth0_vlan: left promiscuous mode [ 1491.704775][T18073] team0 (unregistering): Port device team_slave_1 removed [ 1491.737883][T18073] team0 (unregistering): Port device team_slave_0 removed [ 1491.769311][T18073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1491.800354][T18073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1491.920320][T18073] bond0 (unregistering): Released all slaves [ 1492.826131][T18073] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.889708][T18073] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.980353][T18073] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.034733][T18073] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.180364][T18073] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.236894][T18073] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.279681][T18073] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.323937][T18073] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.450279][T18073] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.507082][T18073] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.561720][T18073] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.604462][T18073] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.987867][T18073] ip6gretap0 (unregistering): left allmulticast mode [ 1494.581717][T18073] dvmrp0 (unregistering): left allmulticast mode [ 1495.316196][T18073] hsr_slave_0: left promiscuous mode [ 1495.352293][T18073] hsr_slave_1: left promiscuous mode [ 1495.364329][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.375832][T18073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.383502][T18073] bridge_slave_1: left allmulticast mode [ 1495.389387][T18073] bridge_slave_1: left promiscuous mode [ 1495.395089][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.403933][T18073] bridge_slave_0: left allmulticast mode [ 1495.411470][T18073] bridge_slave_0: left promiscuous mode [ 1495.417166][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.428346][T18073] hsr_slave_0: left promiscuous mode [ 1495.435591][T18073] hsr_slave_1: left promiscuous mode [ 1495.442413][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.449781][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.457651][T18073] bridge_slave_1: left allmulticast mode [ 1495.463349][T18073] bridge_slave_1: left promiscuous mode [ 1495.468964][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.476946][T18073] bridge_slave_0: left allmulticast mode [ 1495.482570][T18073] bridge_slave_0: left promiscuous mode [ 1495.488506][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.499552][T18073] hsr_slave_0: left promiscuous mode [ 1495.505618][T18073] hsr_slave_1: left promiscuous mode [ 1495.511241][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.518738][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.526414][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.534986][T18073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.542637][T18073] bridge_slave_1: left allmulticast mode [ 1495.548272][T18073] bridge_slave_1: left promiscuous mode [ 1495.553987][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.561995][T18073] bridge_slave_0: left allmulticast mode [ 1495.567617][T18073] bridge_slave_0: left promiscuous mode [ 1495.573510][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.584257][T18073] hsr_slave_0: left promiscuous mode [ 1495.589874][T18073] hsr_slave_1: left promiscuous mode [ 1495.595751][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.603235][T18073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.610698][T18073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.618166][T18073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.626592][T18073] bridge_slave_1: left allmulticast mode [ 1495.632229][T18073] bridge_slave_1: left promiscuous mode [ 1495.637918][T18073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.645933][T18073] bridge_slave_0: left allmulticast mode [ 1495.651555][T18073] bridge_slave_0: left promiscuous mode [ 1495.657335][T18073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.669148][T18073] veth1_macvtap: left promiscuous mode [ 1495.674640][T18073] veth0_macvtap: left promiscuous mode [ 1495.680344][T18073] veth1_vlan: left promiscuous mode [ 1495.685621][T18073] veth0_vlan: left promiscuous mode [ 1495.691708][T18073] veth1_macvtap: left promiscuous mode [ 1495.697176][T18073] veth0_macvtap: left promiscuous mode [ 1495.703034][T18073] veth1_vlan: left promiscuous mode [ 1495.708266][T18073] veth0_vlan: left promiscuous mode [ 1495.714399][T18073] veth1_macvtap: left promiscuous mode [ 1495.719873][T18073] veth0_macvtap: left promiscuous mode [ 1495.725767][T18073] veth0_vlan: left promiscuous mode [ 1495.771751][T18073] infiniband syz0: set down [ 1496.017004][T18073] team0 (unregistering): Port device team_slave_1 removed [ 1496.053913][T18073] team0 (unregistering): Port device team_slave_0 removed [ 1496.085211][T18073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.120682][T18073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.173672][T18073] bond0 (unregistering): Released all slaves [ 1496.320253][T18073] team0 (unregistering): Port device team_slave_1 removed [ 1496.332080][T18073] team0 (unregistering): Port device team_slave_0 removed [ 1496.363909][T18073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.374273][ T1136] smc: removing ib device syz0 [ 1496.400385][T18073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.460151][T18073] bond0 (unregistering): Released all slaves [ 1496.671420][T18073] team0 (unregistering): Port device team_slave_1 removed [ 1496.704719][T18073] team0 (unregistering): Port device team_slave_0 removed [ 1496.717975][T18073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.749582][T18073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.806771][T18073] bond0 (unregistering): Released all slaves [ 1497.116104][T18073] team0 (unregistering): Port device team_slave_1 removed [ 1497.148407][T18073] team0 (unregistering): Port device team_slave_0 removed [ 1497.189119][T18073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.202866][T18073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1497.268304][T18073] bond0 (unregistering): Released all slaves